An official website of the United States government         Here's how you know         
**Official websites use .mil**
A **.mil** website belongs to an official U.S. Department of Defense organization in the United States.
**Secure .mil websites use HTTPS**
 A **lock (lock )** or **https://** means you’ve safely connected to the .mil website. Share sensitive information only on official, secure websites.

Skip to main content (Press Enter).

Defense Logistics AgencyThe Nation's Combat Logistics Support Agency

Search
Search

Search

-  Home		 
-  What DLA Offers    -  Excess Property Disposal             
  -  Document Services             
  -  Products             
  -  Services             
  -  Programs 
-  Working With DLA    -  Applications             
  -  Small Business             
  -  Federal and International Cataloging             
  -  Defense Data Standards             
  -  Events             
  -  Procurement Policies             
  -  Government Programs             
  -  Forms 
-  Organizations    -  DLA Headquarters             
  -  DLA Aviation             
  -  DLA Disposition Services             
  -  DLA Distribution             
  -  DLA Energy             
  -  DLA Land and Maritime             
  -  DLA Troop Support             
  -  DLA CENTCOM & SOCOM             
  -  DLA Europe & Africa             
  -  DLA Indo-Pacific 
-  Customer Support    -  Self Help Tools             
  -  How to Order             
  -  Find Your Order             
  -  Customer Facing Offices             
  -  Training             
  -  Brochures             
  -  Warfighter Support             
  -  Customer Service Management 
-  Careers		 
-  About DLA    -  Contact Us             
  -  Locations             
  -  Leaders             
  -  News             
  -  History             
  -  Media Gallery             
  -  DLA Campaigns 

HomePrivacy Act Of 1974

                            - Freedom of Information Act                                - FOIA Request
                              - Electronic Reading Room
                            - Privacy Act of 1974                                - Privacy Act Request

## Contact Us

----

### Senior Privacy Officer

**Jennifer Nikolaisen**Email: ** Privacy@dla.milPhone Number: ** 571-544-0984

### Privacy Officer

**Lewis Oleinick**Email: ** Lewis.Oleinick@dla.milPhone Number: ** 571-767-6194

## Related Links

----

                            - Defense Privacy Office Home Page       
                            - Privacy Act of 1974 (5 United States Code 552a)        
                            - DOD Instruction 5400.11, DOD Privacy and Civil Liberties Programs     (PDF)    
                            - DOD 5400.11-R, DOD Privacy Program Regulation     (PDF)    
                            - Department of Justice Privacy Act Overview       
                            - Full Legislative History of the Privacy Act of 1974       
                            - A Citizen's Guide On Using The Freedom Of Information Act And The Privacy Act Of 1974 To Request Government Records, Report By The Committee On Oversight and Government Reform    (PDF)    
                            - NIST Special Publication 800-122, "Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)"    (PDF)    
                            - EU Privacy and Data Protection Directives       
                            - APEC Privacy Framework    
                            - Defense, Privacy, Civil Liberties       
                            - DoD Component Privacy Impact Assessments        
                            - DD Form 2930 PIA    
                            - Privacy Overlay       
                            - DoD Privacy Office       
                            - E-Government Act of 2002       
                            - Judicial Redress Act of 2015      

## Policy, Regulations And Standards

### Federal Privacy Policy

                            - OMB Circular A-130  (PDF, July 28, 2016)    
                            - OMB Circular A-108  (PDF, January 26, 2017)

### Regulations

                            - DOD Privacy Program Regulation  (current eCFR)

### Standards

                            - NIST Special Publication (SP) 800-122, "Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)"  (PDF, April 2010)    
                            - Committee on National Security Systems Instruction (CNSSI) No. 1253, Appendix F, Attachment 6, "Privacy Overlay"  (PDF, April 20, 2015)

### DLA Privacy Policy

                            - DLA Policies & Procedures when Personal Information is Lost, Stolen, or Compromised  (PDF)    
                            - DLA Privacy Safeguards and Responsibilities Certification - Civilian and Military  (PDF)    
                            - DLA Privacy Safeguards and Responsibilities Certification - Contractor  (PDF)

# Privacy Act of 1974

## About the Privacy Act

The Privacy Act (PA) of 1974, 5 U.S.C.552a, is a federal statute that establishes safeguards for the protection of records that the Federal Government (Executive Branch only) collects and maintains on U.S. citizens and aliens lawfully admitted for permanent residence. Specifically, it mandates that the Government:
                            - Disclose why information is being collected and how it will be used;
                            - Maintain only what is needed to accomplish agency business;
                            - Publish any new, revised, or deleted system of records notices in the Federal Register;
                            - Ensure that information is accurate, relevant, timely, and complete; and
                            - Provide individuals with the opportunity to correct inaccuracies in their record.

The Privacy Act only covers information filed within a "system of records." A system of records is a group of files that:
                            - Contain an individual's name, Social Security Number (SSN), or some other unique personal identifier (such as employee number) and one other element of personal information about the individual (such as date of birth); AND
                            - Are retrieved by an individual's name, SSN, or personal identifier.

## Fees

An individual may be charged only for the direct cost of copying and reproduction, computed using the appropriate portions of the fee schedule in 32 CFR part 310. Normally, fees are waived automatically if the direct costs of a given request is less than $30. This fee waiver provision does not apply when a waiver has been granted to the individual before, and later requests appear to be an extension or duplication of that original request. DLA activities may, however, set aside this automatic fee waiver provision when on the basis of good evidence it determines that the waiver of fees is not in the public interest. Decisions to waive or reduce fees that exceed the automatic waiver threshold will be made on a case-by-case basis.

## Systems of Records Notices

DLA Privacy Act systems of records are decentralized, located at the HQ DLA facility and at the DLA Field Activities, and established based on the type of information they contain. For example, separate Privacy Act systems exist for employee training records, firefighter/EMT records, vehicle/traffic incidents, firearms registration records, and so on. Thus, there is no one file that contains "all" information about an individual. Records are normally located in the geographic area where the individual developed a relationship with DLA. DLA's published Privacy Act systems of records notices may be found at Defense Privacy, Civil Liberties, and Transparency Division DoD Component Notices**.

You are encouraged to scan other DoD Component Privacy Act systems of records notices because a handful of DoD Components have been given DoD-wide responsibility for certain programs/information collections. For example, DoD consolidated certain finance and accounting activities under the Defense Finance and Accounting Service (DFAS). DFAS is responsible for maintaining the Privacy Act systems of records for DoD civilian and military pay (active and reserve); military retiree and annuity pay; and travel pay. Other DoD Component's published Privacy system of records notices may be found at Defense Privacy, Civil Liberties, and Transparency Privacy SORNs**.

Some Federal agencies have responsibility for one or more Privacy Act systems of records which are applicable Government-wide. This negates the need for DLA to publish a system notice if it maintains records under anyone of the Government-wide Privacy Act systems of records notices. All Federal Privacy Act systems of records notices may be found on the Government Printing Office webpage Systems of Records Notices (SORNs)**.

## Privacy Exemptions

Not all records about an individual must be disclosed under the Privacy Act. Some records may be withheld to protect important government interests such as national security or law enforcement. The Privacy Act exemptions are different than the exemptions of the FOIA. Under the FOIA, any record may be withheld from disclosure if it contains exempt information when a request is received. The decision to apply a FOIA exemption is made only after a request has been made. In contrast, Privacy Act exemptions apply not to a record but to a "system of records." Before an agency can apply a Privacy Act exemption, the agency must first publish a rule stating that there may be exempt records in that "system of records." Since most record systems are not exempt, the exemptions are not relevant to most requests. Because Privacy Act exemptions are complex and used infrequently, most requesters need not worry about them. The exemptions are set out in the law. Privacy Act exemptions rules are published in the Federal Register. 

## Verification of Identity

Depending on the type of records being sought, you may need to verify your identify before any action will be taken on any request. This can be done by providing DLA with a notarized statement or an unsworn declaration made in accordance with 28 U.S.C. 1746, in the following format:
                            - If executed within the United States, its territories, possessions, or commonwealths: `I declare (or certify, verify, or state) under penalty of perjury that the foregoing is true and correct. Executed on (date). (Signature)'.
                            - If executed without the United States: `I declare (or certify, verify, or state) under penalty of perjury under the laws of the United States of America that the foregoing is true and correct. Executed on (date). (Signature)'.

## Amending a Record

Under the Privacy Act, you may ask that information in your file be amended if it is not accurate, relevant, timely, or completed.

Amendment requests must be in writing; however, most routine corrections or updates (such as a change of home address or telephone number) may be made verbally to the System manager identified within the DLA Privacy Act system of records notice.
                            - You may only request correction of factual information, not matters of opinion.
                            - Your request must include a description of the information to be amended and the reason for amendment. If you believe that information is inaccurate or incomplete, you will need to provide documented evidence supporting your position. Likewise, for amendments involving relevance or timeliness, you will need to provide a detailed rationale to support your position. The burden of proof is on the individual to show that information is not accurate, relevant, timely, or complete.

## DoD Privacy Rules of Conduct

The Privacy Act requires each Agency to establish rules of conduct for all persons involved in the design, development, operation, and maintenance of any system of record and to train these persons with respect to these rules. These rules of conduct are set forth in DOD Directive 5400.11, Department of Defense Privacy Program and codified at 32 CFR part 310.

DoD personnel shall:
                            - Take such actions, as considered appropriate, to ensure that any personal information contained in a system of records, of which they have access to and are using to conduct official business, shall be protected so that the security and confidentiality of the information shall be preserved.
                            - Not disclose any personal information contained in any system of records, except as authorized. Personnel willfully making such disclosure when knowing that disclosure is prohibited are subject to possible criminal penalties and/or administrative sanctions.
                            - Report any unauthorized disclosures of personal information from a system of records or the maintenance of any system of records that are not authorized by this Directive to the applicable Privacy POC for his or her DoD Component.

DoD system managers for each system of records shall:
                            - Ensure that all personnel who either shall have access to the system of records or who shall develop or supervise procedures for handling records in the system of records shall be aware of their responsibilities and are properly trained to safeguard personal information being collected and maintained under the DoD Privacy Program.
                            - Prepare promptly any required new, amended, or altered system notices for the system of records and submit them through their DoD Component Privacy POC to the Defense Privacy Office for publication in the Federal Register
                            - Not maintain any official files on individuals, which are retrieved by name or other personal identifier, without first ensuring that a notice for the system of records shall have been published in the Federal Register. Any official who willfully maintains a system of records without meeting the publication requirements is subject to possible criminal penalties and/or administrative sanctions.

## Privacy Act Reports

The Biennial Privacy Act report was repealed by the Federal Reports Elimination and Sunset Act of 1995, Pub. L. No. 104-66, § 3003, 109 Stat. 707, 734-36 (1995), amended by Pub. L. No. 106-113, § 236, 113 Stat. 1501, 1501A-302 (1999) (changing effective date to May 15, 2000).

----

## Privacy Impact Assessments

### E-Government Act of 2002

Section 208 of the E-Government Act of 2002 (Public Law 107–347)** establishes Government-wide requirements for conducting, reviewing, and publishing Privacy Impact Assessments (PIA). OMB Memorandum M-03-22** directs all Federal agencies, including the Department of Defense, to conduct PIAs. DoD Instruction (DoDI) 5400.16 (February 12, 2009)** directs all DOD components to analyze and ensure personally identifiable information (PII) in electronic form is collected, stored, protected, used, shared, and managed in a manner that protects privacy. PIAs are completed on all new or significantly altered DoD Information Systems and electronic collections, including those supported through contracts with external sources that collect, maintain, use, or disseminate PII about members of the public, Federal personnel, contractors, or in some cases foreign nationals in order to:
                            - Ensure PII handling conforms to applicable legal, regulatory, and policy requirements regarding privacy;
                            - Determine the need, privacy risks, and effects of collecting, maintaining, using, and disseminating PII in electronic form; and
                            - Examine and evaluate protections and alternative processes to mitigate potential privacy risks.

### DoD Privacy Impact Assessment Websites

                            - DOD CIO Privacy Impact Assessment Website  
                            - DOD DD Form 2930, "Privacy Impact Assessment"  (PDF) 
                            - DOD Privacy Impact Assessment (PIA)  (PDF) 

### Completed Privacy Impact Assessments

2018

                                - Learning Management System (LMS) Software as a Service (SaaS) - 28 Feb 2018  (PDF)
                                - RecTrac - 8 Mar 2018  (PDF)
                                - Enterprise Workforce Support Capability - DLA Intelligence (EWSC-DI) - 26 Mar 2018  (PDF)
                                - Employee Activity Guide for Labor Entry (EAGLE) – 25 Oct 2018  (PDF)

2016

                                - EEO Automated Complaint Files - 8 Mar 2016  (PDF)
                                - Apparel Research Network (ARN) - 10 May 2016  (PDF)
                                - Document Automation Content Service - Records Management (DACS-RM) - 1 Jul 2016  (PDF)
                                - FLIS Portfolio Data Warehouse (FPDW) - 17 Nov 2016  (PDF)

2015

                                - Defense Agencies Initiative (DAI) - 29 Jan 2015  (PDF)
                                - DLA HR ReconAlysis - 26 Feb 2015  (PDF)
                                - DLA PoliceCenter (POLC) - 8 Apr 2015  (PDF)
                                - HR Web Retirement Estimate Request System (RERS) - 21 May 2015  (PDF)
                                - Labor, Management, and Employee Relations (LMER) - 21 May 2015  (PDF)
                                - DLA Action Item Tickler Report (DAITR) - 29 May 2015  (PDF)
                                - Department of Defense Electronic Mall (DOD EMALL) - 25 Jun 2015  (PDF)
                                - DLA Enterprise Infrastructure Services Active Directory (DEIS-AD) - 31 July 2015  (PDF)
                                - HR Remedy - 7 Aug 2015  (PDF)
                                - HR Management Information System - 11 Aug 2015  (PDF)
                                - HR Defense Ready - 24 Aug 2015  (PDF)

2014

                                - CRM Sales and Business Objects - 8 Aug 2014  (PDF)
                                - iComplaints - 3 Oct 2014  (PDF)

2013

                                - SYSTOC - 15 Feb 2013  (PDF)
                                - Account Management Provisioning System for DLA (AMPS DLA) - 3 May 2013  (PDF)
                                - Enterprise Business System (EBS) - 18 Sept 2013  (PDF)
                                - Mass Notification System (MNS) - 19 Sept 2013  (PDF)
                                - Personnel Security (PERSEC) - 30 Sept 2013  (PDF)
                                - Physical Access Control System (PACS) (Honeywell) - 16 Dec 2013  (PDF)
                                - Physical Access Control System (PACS) (Lenel) - 16 Dec 2013  (PDF)

2012

                                - Corporate Electronic Document Management Systems (CEDMS) - 21 Sept 2012  (PDF)
                                - Data Loss Prevention (DLP) - 27 Nov 2012  (PDF)
                                - Account Management Provisioning System for DFAS (AMPS DFAS) - 28 Nov 2012  (PDF)

2011

                                - DLA Disposition Services Automated Information System (DAISY) Local Sales - 7 Feb 2011  (PDF)
                                - DAISY National Sales Program (DNSP) - 23 Feb 2011  (PDF)
                                - Police Blotter - 11 May 2011  (PDF)
                                - DLA Enterprise Hotline Program - 24 June 2011  (PDF)

2010

                                - Electronic Document Access (EDA) - 6 July 2010  (PDF)
                                - DLA Criminal Incident Reporting System (DCIRS) - 28 Sept 2010  (PDF)
                                - Debt Management System - 27 Dec 2010  (PDF)

2009

                                - Defense Travel System (DTS) - 27 Feb 2009  (PDF)
                                - Integrated Data Environment (IDE) - 11 Aug 2009  (PDF)

2008

                                - Automated Statistics About Personnel (ASAP)- 30 Nov 2008  (PDF)

----

## Privacy Act Training

### Course Information

 

### Reminders

                      - Contact Us
                      - Site Index
                      - Strategic Plan
                      - DLA IG Hotline
                      - FOIA
                      - No FEAR Act
                      - Whistleblower Protection
                      - DLA Careers
                      - Images
                      - Webmaster
                      - EEO
                      - Section 508
                      - Public Affairs
                      - SAPR
                      - External Links Disclaimer
                      - DOD Information Quality Guidelines
                      - Privacy/Security
                      - USA.gov
                      - DOD Web Policy
                      - DOD Open Government
                      - Plain Language

### Stay Connected

Hosted by Defense Media Activity - WEB.mil