Privacy Act 1974 (United States)

Privacy Act 1974 (United States)
Name	Privacy Act of 1974
Enacted by	93rd United States Congress
Effective	1974-12-31
Public law	93–579
Citation	5 U.S.C. § 552a
Introduced	Democratic Party leadership
Signed by	Gerald Ford
Signed date	1974-12-31

Privacy Act 1974 (United States) The Privacy Act of 1974 is a United States federal statute that establishes rules governing the collection, maintenance, use, and dissemination of personally identifiable information by federal agencies. Enacted during the aftermath of debates involving Watergate scandal, Vietnam War, and concerns raised by Senator Sam Ervin and Representative Edward Hutchinson, the Act sought to balance Nixon administration surveillance powers against individual privacy interests. The law created procedural rights for individuals and record-keeping obligations for agencies such as the Federal Bureau of Investigation, Central Intelligence Agency, and Social Security Administration.

Background and enactment

The Act emerged from post-Watergate scandal reforms and legislative responses to investigative findings by the Church Committee (United States Senate Select Committee to Study Governmental Operations with Respect to Intelligence Activities) and the Herman Goldstein-era inquiries into law enforcement databases. Debates in the 93rd United States Congress invoked precedents like the Freedom of Information Act and recommendations from the U.S. Commission on Civil Rights and the Office of Management and Budget. Sponsors such as Senator James L. Buckley and advocates including Senator Sam Ervin framed the statute to constrain abuses exposed by revelations involving figures like E. Howard Hunt and agencies like the Federal Bureau of Investigation.

Scope and key provisions

The Act, codified at 5 U.S.C. § 552a, applies to federal agency systems of records and prescribes requirements for notice, access, amendment, and disclosure accounting. It mandates that agencies publish system-of-records notices in the Federal Register and implement safeguards consistent with directives from the Office of Management and Budget. Key provisions include access rights paralleling mechanisms in the Freedom of Information Act, an individual’s right to seek amendment of records, and a civil remedies section permitting suits for willful or intentional violations. The statute also establishes criminal penalties for unauthorized disclosure and requires agencies to maintain accurate, relevant, timely, and complete records.

Definitions and covered agencies

The Act defines "agency" and "record" for purposes of coverage, specifying systems of records as groupings from which information is retrieved by personal identifiers such as name or social security number. Covered agencies include executive branch entities like the Social Security Administration, Department of Defense, Department of Homeland Security, and independent bodies when operating federal systems. Exclusions and special rules apply to intelligence components such as the Central Intelligence Agency and to records maintained by Congress and the United States Postal Service in certain contexts, with definitions informed by precedents involving entities like the Central Intelligence Agency and National Security Agency.

Rights of individuals and exemptions

Individuals have the right to access records about themselves, request amendment of inaccurate information, and obtain an accounting of disclosures. The Act permits agencies to invoke exemptions for national security, law enforcement, and investigatory files, with specific categories authorized under 5 U.S.C. § 552a(j) and (k). Exemptions have been contested in litigation involving parties such as the American Civil Liberties Union and plaintiffs represented by law firms that litigate against agencies like the Federal Bureau of Investigation and Immigration and Customs Enforcement. Civil remedies allow for actual damages, and in some cases, attorneys' fees, with criminal penalties applying to willful disclosures.

Administration and enforcement

Administration of the Act falls to agency privacy officers, the Office of Management and Budget, and the Department of Justice for defense of agencies in litigation. The Privacy Act Officer responsibilities intersect with the Chief Privacy Officer roles created by later executive orders and statutes, and agencies publish system-of-records notices in the Federal Register. Enforcement largely relies on individual civil suits in federal district courts, and the Office for Civil Rights in the Department of Health and Human Services and the Office of Management and Budget provide policy guidance, while congressional oversight by committees such as the United States House Committee on Oversight and Government Reform influences compliance.

Major amendments and legislative history

The Act has been amended by statutes and influenced by subsequent laws, including the Privacy Act Amendments of 1978 debates and changes intersecting with the Electronic Communications Privacy Act of 1986, the Health Insurance Portability and Accountability Act of 1996, and post-9/11 measures like the Patriot Act. Legislative responses to technology and data-mining incidents prompted proposals in the 104th United States Congress and later sessions; executive orders from presidents such as Bill Clinton and Barack Obama further shaped implementation. Congressional hearings frequently reference incidents involving agencies like the Internal Revenue Service and Department of Defense to argue for statutory updates.

Notable litigation and interpretations

Key judicial interpretations come from cases such as decisions in the United States Court of Appeals for the Ninth Circuit, and federal district courts addressing the statute’s waiver of sovereign immunity, standing, and the existence of damages claims. Litigation involving the Federal Bureau of Investigation and the Central Intelligence Agency has tested exemptions and disclosure rules, while suits by the American Civil Liberties Union and individual plaintiffs have clarified access and amendment rights. Courts have also considered the interplay between the Act and the Freedom of Information Act in matters involving agencies like the Department of Justice and National Archives and Records Administration.

Category:United States federal privacy legislation