Update privacy act statement with requested language

OIRA requested that we change the language to not imply that all uses are required by law, but may be disclosed in various ways.  I blame the SORN.