(a) General. This part contains the regulations of the Office of Inspector General (“OIG”) implementing the Privacy Act of 1974 (5 U.S.C. 552a). The regulations inform the public that the Inspector General has the responsibility for carrying out the requirements of the Privacy Act and for issuing internal OIG orders and directives in connection with the Privacy Act. These regulations apply to all records that are contained in systems of records maintained by the OIG and that are retrieved by an individual's name or personal identifier.

(b) Applicability of part 16. In addition to these regulations, the provisions of 24 CFR part 16 apply to the OIG, except that appendix A to part 16 is not applicable. The provisions of this part shall govern in the event of any conflict with the provisions of part 16.

For purposes of this part:

Department means the OIG, except that in the context of §§ 16.1(d); 16.11(b) (1), (3), and (4); and 16.12(e), when those sections are incorporated by reference, the term means the Department of Housing and Urban Development.

Privacy Act Officer means an Assistant Inspector General.

Privacy Appeals Officer means the Inspector General.

(a) A request from an individual for an OIG record about that individual which is not contained in an OIG system of records will be considered to be a Freedom of Information Act (FOIA) request and will be processed under 24 CFR part 2002.

(b) A request from an individual for an OIG record about that individual which is contained in an OIG system of records will be processed under both the Privacy Act and the FOIA in order to ensure maximum access under both statutes. This practice will be undertaken regardless of how an individual characterizes the request.

(1) The procedures for inquiries and requirements for access to records under the Privacy Act are more specifically set forth in 24 CFR part 16, except that appendix A to part 16 does not apply to the OIG.

(2) An individual will not be required to state a reason or otherwise justify his or her request for access to a record.

Officials to receive requests and inquiries for access to, or correction of, records in OIG systems of records are the Privacy Act Officers described in § 2003.2 of this part. Written requests may be addressed to the appropriate Privacy Act Officer at: Office of Inspector General, Department of Housing and Urban Development, Washington, DC 20410.

(a) Access by an individual to a record about that individual which is contained in an OIG system of records will be denied only upon a determination by the Privacy Act Officer that:

(1) The record was compiled in reasonable anticipation of a civil action or proceeding; or the record is subject to a Privacy Act exemption under § 2003.8 or § 2003.9 of this part; and

(2) The record is also subject to a FOIA exemption under § 2002.21(b) of this chapter.

(b) If a request is partially denied, any portions of the responsive record that can be reasonably segregated will be provided to the individual after deletion of those portions determined to be exempt.

(c) The provisions of 24 CFR 16.6(b) and 16.7, concerning notification of an initial denial of access and administrative review of the initial denial, apply to the OIG, except that:

(1) The final determination of the Inspector General, as Privacy Appeals Officer for the OIG, will be in writing and will constitute final action of the Department on a request for access to a record in an OIG system of records; and

(2) If the denial of the request is in whole or in part upheld, the final determination of the Inspector General will include notice of the right to judicial review.

(a) The OIG may disclose an individual's record to a person other than the individual to whom the record pertains in the following instances:

(1) Upon written request by the individual, including authorization under 24 CFR 16.5(e);

(2) With the prior written consent of the individual;

(3) To a parent or legal guardian of the individual under 5 U.S.C. 552a(h); or

(4) When permitted by the provisions of 5 U.S.C. 552a(b) (1) through (12).

(b) [Reserved]

(a) The Inspector General is authorized by written delegation from the Secretary of HUD and under the Inspector General Act to make written requests under 5 U.S.C. 552a(b)(7) for transfer of records maintained by other agencies which are necessary to carry out an authorized law enforcement activity under the Inspector General Act.

(b) The Inspector General delegates the authority under paragraph (a) of this section to the following OIG officials:

(1) Deputy Inspector General;

(2) Assistant Inspector General for Audit;

(3) Assistant Inspector General for Investigation; and

(4) Assistant Inspector General for Management and Policy.

(c) The officials listed in paragraph (b) of this section may not redelegate the authority described in paragraph (a) of this section.

(a) The systems of records entitled “Investigative Files of the Office of Inspector General,” “Hotline Complaint Files of the Office of Inspector General,” “Name Indices System of the Office of Inspector General,” and “AutoInvestigation of the Office of Inspector General” consist, in part, of information compiled by the OIG for the purpose of criminal law enforcement investigations. Therefore, to the extent that information in these systems falls within the scope of exemption (j)(2) of the Privacy Act, 5 U.S.C. 552a(j)(2), these systems of records are exempt from the requirements of the following subsections of the Privacy Act, for the reasons stated in paragraphs (a)(1) through (6) of this section.

(1) From subsection (c)(3), because release of an accounting of disclosures to an individual who is the subject of an investigation could reveal the nature and scope of the investigation and could result in the altering or destruction of evidence, improper influencing of witnesses, and other evasive actions that could impede or compromise the investigation.

(2) From subsection (d)(1), because release of investigative records to an individual who is the subject of an investigation could interfere with pending or prospective law enforcement proceedings, constitute an unwarranted invasion of the personal privacy of third parties, reveal the identity of confidential sources, or reveal sensitive investigative techniques and procedures.

(3) From subsection (d)(2), because amendment or correction of investigative records could interfere with pending or prospective law enforcement proceedings, or could impose an impossible administrative and investigative burden by requiring the OIG to continuously retrograde its investigations attempting to resolve questions of accuracy, relevance, timeliness and completeness.

(4) From subsection (e)(1), because it is often impossible to determine relevance or necessity of information in the early stages of an investigation. The value of such information is a question of judgment and timing; what appears relevant and necessary when collected may ultimately be evaluated and viewed as irrelevant and unnecessary to an investigation. In addition, the OIG may obtain information concerning the violation of laws other than those within the scope of its jurisdiction. In the interest of effective law enforcement, the OIG should retain this information because it may aid in establishing patterns of unlawful activity and provide leads for other law enforcement agencies. Further, in obtaining evidence during an investigation, information may be provided to the OIG which relates to matters incidental to the main purpose of the investigation but which may be pertinent to the investigative jurisdiction of another agency. Such information cannot readily be identified.

(5) From subsection (e)(2), because in a law enforcement investigation it is usually counterproductive to collect information to the greatest extent practicable directly from the subject thereof. It is not always feasible to rely upon the subject of an investigation as a source for information which may implicate him or her in illegal activities. In addition, collecting information directly from the subject could seriously compromise an investigation by prematurely revealing its nature and scope, or could provide the subject with an opportunity to conceal criminal activities, or intimidate potential sources, in order to avoid apprehension.

(6) From subsection (e)(3), because providing such notice to the subject of an investigation, or to other individual sources, could seriously compromise the investigation by prematurely revealing its nature and scope, or could inhibit cooperation, permit the subject to evade apprehension, or cause interference with undercover activities.

(b) [Reserved]

(a) The systems of records entitled “Investigative Files of the Office of Inspector General,” “Hotline Complaint Files of the Office of Inspector General,” “Name Indices System of the Office of Inspector General,” and “AutoInvestigation of the Office of Inspector General” consist, in part, of investigatory material compiled by the OIG for law enforcement purposes. Therefore, to the extent that information in these systems falls within the coverage of exemption (k)(2) of the Privacy Act, 5 U.S.C. 552a(k)(2), these systems of records are exempt from the requirements of the following subsections of the Privacy Act, for the reasons stated in paragraphs (a) (1) through (4) of this section.

(1) From subsection (c)(3), because release of an accounting of disclosures to an individual who is the subject of an investigation could reveal the nature and scope of the investigation and could result in the altering or destruction of evidence, improper influencing of witnesses, and other evasive actions that could impede or compromise the investigation.

(2) From subsection (d)(1), because release of investigative records to an individual who is the subject of an investigation could interfere with pending or prospective law enforcement proceedings, constitute an unwarranted invasion of the personal privacy of third parties, reveal the identity of confidential sources, or reveal sensitive investigative techniques and procedures.

(3) From subsection (d)(2), because amendment or correction of investigative records could interfere with pending or prospective law enforcement proceedings, or could impose an impossible administrative and investigative burden by requiring the OIG to continuously retrograde its investigations attempting to resolve questions of accuracy, relevance, timeliness and completeness.

(4) From subsection (e)(1), because it is often impossible to determine relevance or necessity of information in the early stages of an investigation. The value of such information is a question of judgment and timing; what appears relevant and necessary when collected may ultimately be evaluated and viewed as irrelevant and unnecessary to an investigation. In addition, the OIG may obtain information concerning the violation of laws other than those within the scope of its jurisdiction. In the interest of effective law enforcement, the OIG should retain this information because it may aid in establishing patterns of unlawful activity and provide leads for other law enforcement agencies. Further, in obtaining evidence during an investigation, information may be provided to the OIG which relates to matters incidental to the main purpose of the investigation but which may be pertinent to the investigative jurisdiction of another agency. Such information cannot readily be identified.

(b) The systems of records entitled “Investigative Files of the Office of Inspector General,” “Hotline Complaint Files of the Office of Inspector General,” “Name Indices System of the Office of Inspector General,” and “Autoinvestigation of the Office of Inspector General” consist in part of investigatory material compiled by the OIG for the purpose of determining suitability, eligibility, or qualifications for Federal civilian employment or Federal contracts, the release of which would reveal the identity of a source who furnished information to the Government under an express promise that the identity of the source would be held in confidence. Therefore, to the extent that information in these systems fall within the coverage of exemption (k)(5) of the Privacy Act, 5 U.S.C. 552a(k)(5), these systems of records are exempt from the requirements of subsection (d)(1), because release would reveal the identity of a source who furnished information to the Government under an express promise of confidentiality. Revealing the identity of a confidential source could impede future cooperation by sources, and could result in harassment or harm to such sources.