The three rights include the right to request records, subject to Privacy Act exemptions; the right to request a change to records that are not accurate, relevant, timely or complete; and the right to be protected against unwarranted invasion of privacy resulting from the collection, maintenance, use and disclosure of personal information.