Privacy Act Implementation Rules at the Social Security Administration

In accordance with the Privacy Act (5 U.S.C. § 552a), federal agencies are required to implement the following agency rules pursuant to 5 U.S.C. § 552a(f).  You can access a complete list, with detailed information about our Privacy Act Implementation Rules in 20 CFR Part 401 - Privacy and Disclosure of Official Records and Information.

5 U.S.C. § 552a(f)(1): Establish procedures whereby an individual can be notified in response to his request if any system of records named by the individual contains a record pertaining to him.

5 U.S.C. § 552a(f)(2): Define reasonable times, places, and requirements for identifying an individual who requests his record or information pertaining to him before the agency shall make the record or information available to the individual.

5 U.S.C. § 552a(f)(3): Establish procedures for the disclosure to an individual upon his request of his record or information pertaining to him, including special procedure, if deemed necessary, for the disclosure to an individual of medical records, including psychological records pertaining to him.

5 U.S.C. § 552a(f)(4): Establish procedures for reviewing a request from an individual concerning the amendment of any record or information pertaining to the individual, for making a determination on the request, for an appeal within the agency of an initial adverse agency determination, and for whatever additional means may be necessary for each individual to be able to exercise fully his rights under the Privacy Act.

5 U.S.C. § 552a(f)(5): Establish fees to be charged, if any, to any individual for making copies of his record, excluding the cost of any search for and review of the record.