(a) This part is published by the Farm Credit Administration pursuant to the Privacy Act of 1974 (Pub. L. 93-579, 5 U.S.C. 552a) which requires each Federal agency to promulgate rules to establish procedures for notification and disclosure to an individual of agency records pertaining to that person, and for review of such records.

(b) The records covered by this part include:

(1) Personnel and employment records maintained by the Farm Credit Administration which are not covered by §§ 293.101 through 293.108 of the regulations of the Office of Personnel Management (5 CFR 293.101 through 293.108), and

(2) Other records contained in record systems maintained by the Farm Credit Administration.

For the purposes of this part:

(a) Agency means the Farm Credit Administration.

(b) Individual means a citizen of the United States or an alien lawfully admitted for permanent residence;

(c) Maintain includes maintain, collect, use, or disseminate;

(d) Record means any item, collection, or grouping of information about an individual that is maintained by an agency including, but not limited to, that person's education, financial transactions, medical history, and criminal or employment history, and that contains that person's name, or the identifying number, symbol, or other identifying particular assigned to the individual, such as a finger or voice print or photograph;

(e) Routine use means, with respect to the disclosure of a record, the use of such record for a purpose that is compatible with the purpose for which it was collected;

(f) Statistical record means a record in a system of records maintained for statistical research or reporting purposes only and not used in whole or in part in making any determination about an identifiable individual, except as provided by 13 U.S.C. 8;

(g) System of records means a group of any records under the control of any agency from which information is retrieved by the name of an individual or by some identifying number, symbol, or other identifying particular assigned to the individual.

(a) Any present or former employee of the Farm Credit Administration seeking access to that person's official civil service records maintained by the Farm Credit Administration shall submit a request in such manner as is prescribed by the Office of Personnel Management.

(b) Individuals shall submit their requests in writing to the Privacy Act Officer, Office of General Counsel, Farm Credit Administration, McLean, Virginia 22102-5090, when seeking to obtain from the Farm Credit Administration:

(1) Notification of whether the agency maintains a record pertaining to that person in a system of records;

(2) Notification of whether the agency has disclosed a record for which an accounting of disclosure is required to be maintained and made available to that person;

(3) A copy of a record pertaining to that person or the accounting of its disclosure;

(4) The review of a record pertaining to that person or the accounting of its disclosure. The request shall state the full name and address of the individual, and identify the system or systems of records believed to contain the information or record sought.

The individual making written requests for information or records ordinarily will not be required to verify that person's identity. The signature upon such requests shall be deemed to be a certification by the requester that he or she is the individual to whom the record pertains, or the parent of a minor, or the duly appointed legal guardian of the individual to whom the record pertains. The Privacy Act Officer, however, may require such additional verification of identity in any instance in which the Privacy Act Officer deems it advisable.

(a) The Privacy Act Officer shall, within a reasonable period of time after the date of receipt of a request for information of records:

(1) Determine whether or not such request shall be granted,

(2) Notify the requester of the determination and, if the request is denied, of the reasons therefor, and

(3) Notify the requester that fees for reproducing copies of records may be charged as provided in § 603.345 of this part.

(b) If access to a record is denied because the information therein has been compiled by the Farm Credit Administration in reasonable anticipation of a civil or criminal action proceeding, the Privacy Act Officer shall notify the requester of that person's right to judicial appeal under 5 U.S.C. 552a(g).

(c)(1) If access to a record is granted, the requester shall notify the Officer whether the requested record is to be copied and mailed to the requester or whether the record is to be made available for personal inspection.

(2) A requester who is an individual may be accompanied by an individual selected by the requester when the record is disclosed, in which case the requester may be required to furnish a written statement authorizing the discussion of the record in the presence of the accompanying person.

(d) If the record is to be made available for personal inspection, the requester shall arrange with the Privacy Act Officer a mutually agreeable time in the offices of the Farm Credit Administration for inspection of the record.

Medical records in the custody of the Farm Credit Administration which are not subject to Office of Personnel Management regulations shall be disclosed either to the individual to whom they pertain or that person's authorized or legal representative or to a licensed physician named by the individual.

(a) If, after disclosure of the requested information, an individual believes that the record is not accurate, relevant, timely, or complete, that person may request in writing that the record be amended. Such a request shall be submitted to the Privacy Act Officer and shall contain identification of the system of records and the record or information therein, a brief description of the material requested to be changed, the requested change or changes, and the reason for such change or changes.

(b) The Privacy Act Officer shall acknowledge receipt of the request within 10 days (excluding Saturdays, Sundays, and legal holidays) and, if a determination has not been made, advise the individual when that person may expect to be advised of action taken on the request. The acknowledgment may contain a request for additional information needed to make a determination.

Upon receipt of a request for amendment of a record, the Privacy Act Officer shall:

(a) Correct any portion of a record which the individual making the request believes is not accurate, relevant, timely, or complete and thereafter inform the individual in writing of such correction, or

(b) Inform the individual in writing of refusal to amend the record and of the reasons therefor, and advise that the individual may appeal such determination as provided in § 603.340 of this part.

(a) Not more than 10 days (excluding Saturdays, Sundays, and legal holidays) after receipt by an individual of an adverse determination on the individual's request to amend a record or otherwise, the individual may appeal to the Director, Office of Agency Services.

(b) The appeal shall be by letter, mailed or delivered to the Director, Office of Agency Services, Farm Credit Administration, McLean, Virginia 22102-5090. The letter shall identify the records involved in the same manner they were identified to the Privacy Act Officer, shall specify the dates of the request and adverse determination, and shall indicate the expressed basis for that determination. Also, the letter shall state briefly and succinctly the reasons why the adverse determination should be reversed.

(c) The review shall be completed and a final determination made by the Director not later than 30 days (excluding Saturdays, Sundays, and legal holidays) from receipt of the request for such review, unless the Director extends such 30-day period for good cause. If the 30-day period is extended, the individual shall be notified of the reasons therefor.

(d) If the Director refuses to amend the record in accordance with the request, the individual shall be notified of the right to file a concise statement setting forth that person's disagreement with the final determination and that person's right under 5 U.S.C. 552a(g)(1)(A) to a judicial review of the final determination.

(e) If an amendment of a record as requested upon review is refused, there shall be included in the disputed portion of the record a copy of the concise statement filed by the individual together with a concise statement of the reasons for not amending the record as requested. Such statements will be included when disclosure of the disputed record is made to persons and agencies as authorized under 5 U.S.C. 552a.

Fees for providing copies of records shall be charged in accordance with §§ 602.11 and 602.12 of this chapter.

Section 552a (i)(3) of the Privacy Act (5 U.S.C. 552a(i)(3)) makes it a misdemeanor, subject to a maximum fine of $5,000, to knowingly and willfully request or obtain any record concerning any individual from an agency under false pretenses. Sections 552a (i) (1) and (2) of the Act (5 U.S.C. 552a (i) (1), (2)) provide penalties for violation by agency employees of the Act or regulations established thereunder.

(a) Specific. Pursuant to 5 U.S.C. 552a(k)(2), the investigatory material compiled for law enforcement purposes in the following systems of records is exempt from subsections (c)(3), (d), (e)(1), (e)(4) (G), (H), and (I) and (f) of 5 U.S.C. 552a and from the provisions of this part:

(b) General. (1) In addition, pursuant to 5 U.S.C. 552a (j)(2), investigatory materials compiled for criminal law enforcement in the system of records described in (b)(2) are exempt from all subsections of 5 U.S.C. 552a,except,c,e,e,7,9,10,and,and. Exemptions from the particular subsections are justified for the following reasons:

(i) From subsection (c)(3) because making available to a record subject the accounting of disclosures from records concerning him/her would reveal investigative interest on the part of the OIG. This would enable record subjects to impede the investigation by, for example, destroying evidence, intimidating potential witnesses, or fleeing the area to avoid inquiries or apprehension by law enforcement personnel.

(ii) From subsection (c)(4) because this system is exempt from the access provisions of subsection (d) pursuant to subsection (j)(2) of the Privacy Act.

(iii) From subsection (d) because the records contained in this system relate to official Federal investigations. Individual access to those records might compromise ongoing investigations, reveal confidential informants or constitute unwarranted invasions of the personal privacy of third parties who are involved in a certain investigation. Amendment of the records would interfere with ongoing criminal law enforcement proceedings and impose an impossible administrative burden by requiring criminal investigations to be continuously reinvestigated.

(iv) From subsections (e) (1) and (5) because in the course of law enforcement investigations, information may occasionally be obtained or introduced the accuracy of which is unclear or which is not strictly relevant or necessary to a specific investigation. In the interests of effective law enforcement, it is appropriate to retain all information that may aid in establishing patterns of criminal activity. Moreover, it would impede the specific investigative process if it were necessary to assure the relevance, accuracy, timeliness and completeness of all information obtained.

(v) From subsection (e)(2) because in a law enforcement investigation the requirement that information be collected to the greatest extent possible from the subject individual would present a serious impediment to law enforcement in that the subject of the investigation would be informed of the existence of the investigation and would therefore be able to avoid detection, apprehension, or legal obligations or duties.

(vi) From subsection (e)(3) because to comply with the requirements of this subsection during the course of an investigation could impede the information gathering process, thus hampering the investigation.

(vii) From subsections (e)(4) (G), and (H), and (I), (e)(8), (f), (g) and (h) because this system is exempt from the access provisions of subsection (d) pursuant to subsection (j) of the Privacy Act.

(2) Office of Inspector General Investigative Files—FCA.