Privacy Act of 1974

Privacy Act of 1974
Shorttitle	Privacy Act of 1974
Longtitle	An Act to amend title 5, United States Code, by adding a section 552a, to safeguard individual privacy from the misuse of Federal records, to provide that individuals be granted access to records concerning them which are maintained by Federal agencies, to establish a Privacy Protection Study Commission, and for other purposes.
Enacted by	93rd
Effective date	September 27, 1975
Public law	93-579
Statutes at large	88, 1896
Title amended	5 U.S.C.: Government Organization and Employees
Sections created	5, 552a
Introducedin	Senate
Introducedby	Sam Ervin
Introduceddate	May 1, 1974
Committees	Senate Government Operations Committee
Passedbody1	Senate
Passeddate1	November 21, 1974
Passedvote1	74-4
Passedbody2	House
Passeddate2	December 11, 1974
Passedvote2	agreed
Signedpresident	Gerald Ford
Signeddate	December 31, 1974

Privacy Act of 1974 is a foundational United States federal law that establishes a code of fair information practices governing the collection, maintenance, use, and dissemination of personally identifiable information by federal agencies. Enacted in the wake of the Watergate scandal and growing public concern over government surveillance, it aims to balance the government's need for information with the right of individuals to be protected against unwarranted invasions of privacy. The law fundamentally altered the relationship between the federal government and citizens regarding personal data.

Overview and Purpose

The legislation emerged from a confluence of events, including investigations by the Senate Church Committee into intelligence abuses and the pioneering work of the Department of Health, Education, and Welfare's Advisory Committee on Automated Personal Data Systems. Its primary purpose is to restrict the disclosure of personally identifiable records maintained by agencies, while granting individuals increased rights to access and amend their files. It serves as a critical counterpart to the Freedom of Information Act, focusing on records pertaining to the individual rather than agency operations.

Key Provisions and Requirements

Central provisions mandate that agencies may only maintain records relevant and necessary to accomplish a purpose required by statute or executive order. Agencies must collect information to the greatest extent practicable directly from the subject individual when the data may affect their rights or benefits. They must also publish a notice in the Federal Register describing their systems of records. A key operational rule, known as the "no disclosure without consent" rule, generally prohibits agencies from disclosing any record without the prior written consent of the individual to whom it pertains, unless one of twelve statutory exceptions applies.

Rights of Individuals

The Act grants several specific rights to U.S. citizens and lawful permanent residents. Individuals have the right to access their records, request amendments to incorrect or irrelevant information, and obtain an accounting of any disclosures made to other agencies or third parties. If an agency denies an access or amendment request, the individual may seek review, first within the agency and subsequently through a civil suit in a federal district court. These provisions empower individuals to know what information the CIA, FBI, or IRS maintains about them.

Agency Responsibilities and Exemptions

Federal agencies bear significant responsibilities, including establishing appropriate administrative, technical, and physical safeguards to protect records. They must also ensure their employees are trained on compliance requirements. However, the Act provides for broad exemptions, particularly for records maintained by CIA or law enforcement agencies like the FBI pertaining to criminal investigations. Other exemptions exist for systems of records used for statistical purposes, those required by statute to be maintained and used solely for statistical research, and records compiled in reasonable anticipation of a civil action or proceeding.

Amendments and Related Legislation

The Act has been amended several times, notably by the Computer Matching and Privacy Protection Act of 1988, which established due process procedures for computerized matches of records between agencies to verify eligibility for federal benefit programs. Other significant related statutes include the Privacy Protection Act of 1980, which protects journalists from searches for documentary materials, and the E-Government Act of 2002, which required agencies to conduct Privacy Impact Assessments. The Health Insurance Portability and Accountability Act (HIPAA) also builds upon its framework for protected health information.

Impact and Criticism

The Act established the first comprehensive regulatory framework for federal government data practices, influencing subsequent laws like the Family Educational Rights and Privacy Act (FERPA) and serving as a model for state privacy laws and international frameworks. Critics, including the Privacy Protection Study Commission it created, have long argued it is weakened by broad exemptions, a lack of an independent enforcement body like the Federal Trade Commission, and its inapplicability to the private sector or state governments. In the digital age, challenges persist regarding its effectiveness against modern data collection and analysis techniques used by entities like the NSA.

Category:United States federal privacy legislation Category:1974 in American law Category:Gerald Ford