The Privacy Act is ill-suited, as it was designed and passed at a time when the only way we could organize data was based on the name of the person to whom it related. In modern databases, we can sort the data in any one of multiple ways.