This subpart contains the regulations of the U.S. Department of Agriculture (USDA) implementing the Privacy Act of 1974 (5 U.S.C. 552a). This subpart sets forth the basic responsibilities of each agency of USDA with regard to USDA's compliance with the requirements of the Privacy Act, and offers guidance to members of the public who wish to exercise any of the rights established by the Privacy Act with regard to records maintained by an agency of USDA.

For purposes of this subpart the terms individual, maintain, record, system of records, statistical record, and routine use shall have the meanings set forth in 5 U.S.C. 552a(a). The term agency shall mean an agency of USDA, unless otherwise indicated.

(a) Any individual who wishes to be notified if a system of records maintained by an agency contains any record pertaining to him or her, or to request access to such records, shall submit a written request in accordance with the instructions set forth in the system notice for that system of records. This request shall include:

(1) The name of the individual making the request;

(2) The name of the system of records (as set forth in the system notice to which the request relates);

(3) Any other information specified in the system notice; and

(4) When the request is one for access, a statement as to whether the requester desires to make a personal inspection of the records, or be supplied with copies by mail.

(b) Any individual whose request under paragraph (a) of this section is denied may appeal that denial to the head of the agency which maintains the system of records to which the request relates.

(c) In the event that an appeal under paragraph (b) of this section is denied, the requester may bring a civil action in federal district court to seek review of the denial.

(a) If an individual submitting a request for access under § 1.112 has asked that an agency authorize a personal inspection of records pertaining to him or her, and the agency has granted that request, the requester shall present himself or herself at the time and place specified in the agency's response or arrange another, mutually convenient, time with the appropriate agency official.

(b) Prior to inspection of the records, the requester shall present sufficient identification (e.g., driver's license, employee identification card, social security card, credit cards) to establish that the requester is the individual to whom the records pertain. If the requester is unable to provide such identification, the requester shall complete and sign in the presence of an agency official a signed statement asserting the requester's identity and stipulating that the requester understands that knowingly or willfully seeking or obtaining access to records about another individual under false pretenses is a misdemeanor punishable by fine up to $5,000. No identification shall be required, however, if the records are required by 5 U.S.C. 552 to be released.

(c) Any individual who has requested access to records about himself or herself by personal inspection, and who wishes to have another person or persons accompany the requester during this inspection, shall submit a written statement authorizing disclosure of the record in the presence of such other person or persons.

(d) Any individual having made a personal inspection of records pertaining to the requester may request the agency to provide the requester copies of those records or any portion of those records. Each agency shall grant such requests but may charge fees in accordance with § 1.120.

(e) If an individual submitting a request for access under § 1.112 wishes to be supplied with copies of the records by mail, the requester shall include with his or her request sufficient data for the agency to verify the requester's identity. If the sensitivity of the records warrant it, however, the agency to which the request is directed may require the requester to submit a signed, notarized statement indicating that the requester is the individual to whom the records pertain and stipulating the requester understands that knowingly or willfully seeking or obtaining access to records about another individual under false pretenses is a misdemeanor punishable by fine up to $5,000. No identification shall be required, however, if the records are required by 5 U.S.C. 552 to be released. If the agency to which this request is directed determines to grant the requested access, it may charge fees in accordance with § 1.120 before making the necessary copies.

(a) Any agency which receives a request or appeal under § 1.112 should acknowledge the request or appeal within 10 days of its receipt (excluding Saturdays, Sundays, and legal public holidays). Wherever practicable, the acknowledgment should indicate whether or not access will be granted and, if so, when and where. When access is to be granted, the agency should provide the access within 30 days of receipt of the request or appeal (excluding Saturdays, Sundays and legal public holidays) unless, for good cause shown, it is unable to do so. If the agency is unable to meet this deadline, it shall inform the requester of this fact, the reasons for its inability to do so, and an estimate of the date on which access will be granted.

(b) Nothing in 5 U.S.C. 552a or this subpart shall be interpreted to require that an individual making a request under § 1.112 be granted access to the physical record itself. The form in which a record is kept (e.g., on magnetic tape), or the content of the record (e.g., a record indexed under the name of the requester may contain records which are not about the requester) may require that the record be edited or translated in some manner. Neither of these procedures may be utilized, however, to withhold information in a record about the requester.

(c) No agency shall deny any request under § 1.112 for information concerning the existence of records about the requester in any system of records it maintains, or deny any request for access to records about the requester in any system of records it maintains, unless that system is exempted from the requirements of 5 U.S.C. 552a(d) in § 1.123.

(d) If any agency receives a request pursuant to § 1.112(a) for access to records in a system of records it maintains which is so exempted, the system manager shall determine if the exemption is to be asserted. If the system manager determines to deny the request, the system manager shall inform the requester of that determination, the reason for the determination, and the title and address of the agency head to whom the denial can be appealed.

(e) If the head of an agency determines that an appeal pursuant to § 1.112(b) is to be denied, the head of the agency shall inform the requester of that determination, the reason for the determination, and the requester's right under 5 U.S.C. 552a(g) to seek judicial review of the denial in Federal district court.

(f) Nothing in 5 U.S.C. 552a or this subpart shall allow an individual access to any information compiled in reasonable anticipation of a civil action or proceeding.

In the event an agency receives a request pursuant to § 1.112 for access to medical records (including psychological records) whose disclosure it determines would be harmful to the individual to whom they relate, it may refuse to disclose the records directly to the requester but shall transmit them to a doctor designated by that individual.

(a) Any individual who wishes to request correction or amendment of any record pertaining to him or her contained in a system of records maintained by an agency shall submit that request in writing in accordance with the instructions set forth in the system notice for that system of records. This request shall include:

(1) The name of the individual making the request;

(2) The name of the system of records (as set forth in the system notice to which the request relates);

(3) A description of the nature (e.g., modification, addition or deletion) and substance of the correction or amendment requested; and

(4) Any other information specified in the system notice.

(b) Any individual submitting a request pursuant to paragraph (a) of this section shall include sufficient information in support of that request to allow the agency to which it is addressed to apply the standards set forth in 5 U.S.C. 552a(e) (1) and (5).

(c) Any individual whose request under paragraph (a) of this section is denied may appeal that denial to the head of the agency which maintains the system of records to which the request relates.

(d) In the event that an appeal under paragraph (c) of this section is denied, the requester may bring a civil action in federal district court to seek review of the denial.

(a) Any agency which receives a request for amendment or correction under § 1.116 shall acknowledge that request within 10 days of its receipt (excluding Saturdays, Sundays and legal public holidays). The agency shall also promptly, either:

(1) Make any correction, deletion or addition with regard to any portion of a record which the requester believes is not accurate, relevant, timely or complete; or

(2) Inform the requester of its refusal to amend the record in accordance with the request; the reason for the refusal; the procedures whereby the requester can appeal the refusal to the head of the agency; and the title and business address of that official. If the agency informs the requester of its determination within the 10-day deadline, a separate acknowledgement is not required.

(b) If an agency is unable to comply with either paragraphs (a)(1) or (2) of this section within 30 days of its receipt of a request for correction or amendment, (excluding Saturdays, Sundays and legal public holidays), it should inform the requester of that fact, the reasons for the inability to comply with paragraphs (a)(1) or (a)(2) of this section within 30 days, and the approximate date on which a determination will be reached.

(c) In conducting its review of a request for correction or amendment, each agency shall be guided by the requirements of 5 U.S.C. 552a(e)(1) and (5).

(d) If an agency determines to grant all or any portion of a request for correction or amendment, it shall:

(1) Advise the individual of that determination;

(2) Make the requested correction or amendment; and

(3) Inform any person or agency outside USDA to whom the record has been disclosed, if an accounting of that disclosure is maintained in accordance with 5 U.S.C. 552a(c), of the occurrence and substance of the correction or amendments.

(e) If an agency determines not to grant all or any portion of a request for correction or amendment, it shall:

(1) Comply with paragraph (d) of this section with regard to any correction or amendment which is made;

(2) Advise the requester of its determination and the reasons for the determination not to grant all or a portion of the request for a correction or amendment;

(3) Inform the requester that he or she may appeal this determination to the head of the agency which maintains the system of records; and

(4) Describe the procedures for making such an appeal, including the title and business address of the official to whom the appeal is to be addressed.

(f) In the event that an agency receives a notice of correction or amendment to information in a record contained in a system of records which it maintains, it shall comply with paragraphs (d)(2) and (3) of this section in the same manner as if it had made the correction or amendment itself.

(a) Any individual whose request for correction or amendment under § 1.116 is denied, and who wishes to appeal that denial, shall address such appeal to the head of the agency which maintains the system of records to which the request relates, in accordance with the procedures set forth in the agency's initial denial of the request.

(b) The head of each agency shall make a final determination with regard to an appeal submitted under paragraph (a) of this section not later than 30 days (excluding Saturdays, Sundays, and legal public holidays) from the date on which the individual requests a review, unless, for good cause shown, the head of the agency extends this 30-day period and so notifies the requester, together with an estimate of the date on which a final determination will be made. Such extension should be utilized only in exceptional circumstances and should not normally exceed 30 days. The delegation of authority set forth in this paragraph may not be redelegated.

(c) In conducting a review of an appeal submitted under paragraph (a) of this section, the head of an agency shall be guided by the requirements of 5 U.S.C. 552a(e)(1) and (5).

(d) If the head of an agency determines to grant all or any portion of an appeal submitted under paragraph (a) of this section, the head of the agency shall inform the requester and the agency shall comply with the procedures set forth in § 1.117(d)(2) and (d)(3).

(e) If the head of an agency determines in accordance with paragraph (c) of this section not to grant all or any portion of an appeal submitted under paragraph (a) of this section, the head of the agency shall inform the requester:

(1) Of this determination and the reasons for the determination;

(2) Of the requester's right to file a concise statement of the requester's reasons for disagreeing with the agency's decision;

(3) Of the procedures for filing such a statement of disagreement;

(4) That such statements of disagreements will be made available to anyone to whom the record is subsequently disclosed, together with (if the agency deems it appropriate) a brief statement by the agency summarizing its reasons for refusing to amend the record;

(5) That prior recipients of the disputed record will be provided with a copy of the statement of disagreement, together with (if the agency deems it appropriate) a brief statement of the agency's reasons for refusing to amend the record, to the extent that an accounting of disclosures is maintained under 5 U.S.C. 552a(c); and

(6) Of the requester's right to seek judicial review of the agency's determination in accordance with 5 U.S.C. 552a(g). The agency shall insure that any statements of disagreement submitted by a requester are handled in accordance with paragraphs (e)(4) and (5) of this section.

No agency shall disclose any record which is contained in a system of records it maintains, by any means of communication to any person, or to another agency outside USDA, except pursuant to a written request by, or with the prior written consent of, the individual to whom the record pertains, unless the disclosure is authorized by one or more provisions of 5 U.S.C. 552a(b).

Any agency which provides copies of records pursuant to a request under this subpart may charge fees for the direct costs of producing such copies in accordance with appendix A to subpart A of this part. No agency, however, shall charge any fee for searches necessary to locate records. Nor shall an agency charge any fees for copies or searches, when the requester sought to make a personal inspection but was provided copies instead at the discretion of the agency.

The criminal penalties which have been established for violations of the Privacy Act of 1974 are set forth in 5 U.S.C. 552a(i). These penalties are applicable to any officer or employee of an agency who commits any of the acts enumerated in 5 U.S.C. 552a(i). These penalties also apply to contractors and employees of such contractors who enter into contracts with an agency of USDA and who are considered to be employees of the agency within the meaning of 5 U.S.C. 552a(m)(1).

Pursuant to 5 U.S.C. 552a(j), and for the reasons set forth in 54 FR 11204-11206 (March 17, 1989), the systems of records (or portions of systems of records) maintained by agencies of USDA identified in this section are exempted from the provisions of 5 U.S.C. 552a, except subsections (b), (c)(1) and (2), (e)(4)(A) through (F), (e)(6), (7), (9), (10), and (11), and (i).

Pursuant to 5 U.S.C. 552a(k), the systems of records (or portions thereof) maintained by agencies of USDA identified below are exempted from the provisions of 5 U.S.C. 552a (c)(3), (d), (e)(1), (e)(4)(G), (H) and (I), and (f). The reasons for exempting each system are set out in the notice for that system published in the Federal Register.

Section 1. General requirements. Each agency that maintains a system of records subject to 5 U.S.C. 552a and the regulations of this subpart shall:

(a) Maintain in its records only such information about an individual as is relevant and necessary to accomplish a purpose of the agency required to be accomplished by statute or by executive order of the President;

(b) Collect information to the greatest extent practicable directly from the subject individual when the information may result in adverse determinations about an individual's rights, benefits, and privileges under Federal programs;

(c) Inform each individual whom it asks to supply information, on the form which it uses to collect the information, or on a separate form that can be retained by the individual, of:

(1) The authority (whether granted by statute, or by executive order of the President) which authorizes the solicitation of the information and whether disclosure of such information is mandatory or voluntary;

(2) The principal purpose or purposes for which the information is intended to be used;

(3) The routine uses which may be made of the information, as published pursuant to paragraph (d)(4) of this section; and

(4) The effects on the individual, if any, of not providing all or any part of the requested information;

(d) Subject to the provisions of section 2 of this appendix, prepare for publication in the Federal Register at least annually a notice of the existence and character of each system it maintains, which notice shall include:

(1) The name and location(s) of the system;

(2) The categories of individuals on whom records are maintained in the system;

(3) The categories of records maintained in the system;

(4) Each routine use of the records contained in the system, including the categories of uses and the purpose of such use;

(5) The policies and practices of the agency regarding storage, retrievability, access controls, retention, and disposal of the records;

(6) The title and business address of the agency official who is responsible for the system of records;

(7) The agency procedures whereby an individual can be notified at his or her request if the system of records contains a record pertaining to the individual;

(8) The agency procedures whereby an individual can be notified at his or her request how the individual can gain access to any record pertaining to him or her contained in the system of records, and how he can contest its content; and

(9) The categories of sources of records in the system;

(e) Maintain all records which are used by the agency in making any determination about any individual with such accuracy, relevance, timeliness, and completeness as is reasonably necessary to assure fairness to the individual in the determination;

(f) Prior to disseminating any record about an individual to any person other than an agency, unless the dissemination is made pursuant to 5 U.S.C. 552a(b)(2), make reasonable efforts to assure that such records are accurate, complete, timely, and relevant for agency purposes;

(g) Maintain no record describing how any individual exercises rights guaranteed by the First Amendment unless expressly authorized by statute or by the individual about whom the record is maintained, or unless pertinent to and within the scope of an authorized law enforcement activity;

(h) Make reasonable efforts to serve notice on an individual when any record on such individual is made available to any person under compulsory legal process when such process becomes a matter of public record;

(i) Establish rules of conduct for persons involved in the design, development, operation, or maintenance of any system of records, or in maintaining any record, and instruct each such person with respect to such rules and the requirements of this section, including any other rules and procedures adopted pursuant to this section and the penalties for noncompliance;

(j) Establish appropriate administrative, technical, and physical safeguards to insure the security and confidentiality of records and to protect against any anticipated threats or hazards to their security or integrity which could result in substantial harm, embarrassment, inconvenience, or unfairness to any individual on whom information is maintained.

Sec. 2. Amendment of routine uses for an existing system of records, or establishment of a new system of records.

(a) Any agency which intends to add a routine use, or amend an existing one, in a system of records it maintains, shall, in accordance with 5 U.S.C. 552a(e)(11), ensure that at least 30 days advance notice of such action is given by publication in the Federal Register and an opportunity provided for interested persons to submit written data, views or arguments to the agency.

(b) Any agency which intends to establish a new system of records, or to alter any existing system of records, shall insure that adequate advance notice is provided to Congress and the Office of Management and Budget to permit an evaluation of the probable or potential effect of such action on the privacy and other personal or property rights of individuals or the disclosure of information relating to such individuals, and its effect on the preservation of the constitutional principles of federalism and separation of powers. Such notice is required for any new system of records and for any alteration in an existing one which will:

(1) Increase the number or types of individuals on whom records are maintained;

(2) Expand the type or amount of information maintained;

(3) Increase the number or categories of agencies or other persons who may have access to those records;

(4) Alter the manner in which the records are organized so as to change the nature or scope of those records (e.g., the combining of two or more existing systems);

(5) Modify the way the system operates at its location(s) in such a manner as to alter the procedures by which individuals can exercise their rights under this subpart; or

(6) Change the equipment configuration on which the system is operated so as to create the potential for greater access (e.g., adding a telecommunications capability).

Sec. 3. Accounting of certain disclosures. Each agency, with respect to each system of records under its control, shall:

(a) Except for disclosures made under 5 U.S.C. 552a(b)(1) and (2), keep an accurate account of:

(1) The date, nature, and purpose of each disclosure of a record to any person or agency outside the Department; and

(2) The name and address of the person or agency to whom the disclosure is made;

(b) Retain the accounting made under paragraph (a) of this section for the longer of a period of five years, after the date of the disclosure for which the accounting is made, or the life of the record disclosed;

(c) Except for disclosures made under 5 U.S.C. 552a(b)(7), make the accounting required under paragraph (a) of this section available to the individual named in the record at his or her request.

Sec. 4. Government contractors. When an agency within the Department provides by a contract for the operation by or on behalf of the agency of a system of records to accomplish an agency function, the agency shall, consistent with its authority, cause the requirements of this subpart to be applied to such system. For purposes of 5 U.S.C. 552a(i) any such contractor or any employee of such contractor shall be considered to be an employee of an agency and therefore subject to the criminal penalties set forth in 5 U.S.C. 552a(i).

Sec. 5. Mailing lists. No agency within the Department shall sell or rent any individual's name and address unless such action is specifically authorized by law. This section shall not be construed to require, or to authorize, the withholding of names and addresses whose disclosure is required by 5 U.S.C. 552.

Sec. 6. Social security account numbers. (a) No agency shall deny, or permit any State or local government with whom it is involved in a cooperative venture to deny, to any individual any right, benefit, or privilege provided by law because of such individual's refusal to disclose his or her social security account number.

(b) Paragraph (a) of this section shall not apply with respect to:

(1) Any disclosure required by Federal statute; or

(2) Any disclosure to any agency relating to a system of records it maintained prior to January 1, 1975, if such disclosure was required under statute or regulation adopted prior to that date, to verify the identity of an individual.

(c) Any agency in the Department which requests an individual to disclose his or her social security account number shall inform that individual whether the disclosure is mandatory or voluntary, by what statutory or other authority the number is solicited, and what uses will be made of it. The agency shall also insure that this information is provided by a State or local government with whom it is involved in a cooperative agreement.

Sec. 7. Annual report. Each agency in the Department shall submit to the Office of the General Counsel prior to March 30 of each year a report containing the following information related to implementation of 5 U.S.C. 552a:

(a) A summary of major accomplishments;

(b) A summary of major plans for activities in the upcoming year;

(c) A list of the systems which were exempted during the year from any of the operative provisions of this subpart pursuant to 5 U.S.C. 552a (j) and (k), whether or not the exemption was effected during that year, the number of instances with respect to each system exempted in which the exemption was invoked to deny access, and the reasons for invoking the exemption;

(d) A brief summary of changes to the total inventory of personal data system subject to this subpart including reasons for major changes; and

(e) A general description of operational experiences including estimates of the number of individuals (in relation to the total number of records in the system):

(1) Requesting information on the existence of records pertaining to them;

(2) Refusing to provide information;

(3) Requesting access to their records;

(4) Appealing initial refusals to amend records; and

(5) Seeking redress through the courts.

Sec. 8. Effect of 5 U.S.C. 552. No agency in the Department shall rely on any exemption in 5 U.S.C. 552 to withhold from an individual any record which is otherwise accessible to such individual under 5 U.S.C. 552a and this subpart.