(a) What is a valid request? In general, a Privacy Act request can be made on your own behalf for records or information about you. You can make a Privacy Act request on behalf of another individual as the parent or guardian of a minor, or as the guardian of someone determined by a court to be incompetent. You also may request access to another individual's record or information if you have that individual's written consent, unless other conditions of disclosure apply.

(b) How and where do I make a request? Your request must be in writing. Regardless of whether your request seeks records from FHFA, FHFA-OIG, or both, you may appear in person to submit your written request to the FHFA Privacy Act Officer, or send your written request to the FHFA Privacy Act Officer by electronic mail, mail, delivery service, or facsimile. The electronic mail address is: [email protected]. For mail or delivery service, the address is: FHFA Privacy Act Officer, Federal Housing Finance Agency, 400 Seventh Street, SW., Eighth Floor, Washington, DC 20219. The facsimile number is (202) 649-1073. Requests for FHFA-OIG maintained records will be forwarded to FHFA-OIG for processing and direct response. You can help FHFA and FHFA-OIG process your request by marking electronic mail, letters, or facsimiles and the subject line, envelope, or facsimile cover sheet with “Privacy Act Request.” FHFA's “Privacy Act Reference Guide,” which is available on FHFA's Web site, http://www.fhfa.gov, provides additional information to assist you in making your request.

(c) What must the request include? You must describe the record that you want in enough detail to enable either the FHFA or FHFA-OIG Privacy Act Officer to locate the system of records containing it with a reasonable amount of effort. Include specific information about each record sought, such as the time period in which you believe it was compiled, the name or identifying number of each system of records in which you believe it is kept, and the date, title or name, author, recipient, or subject matter of the record. As a general rule, the more specific you are about the record that you want, the more likely FHFA or FHFA-OIG will be able to locate it in response to your request.

(d) How do I request amendment or correction of a record? If you are requesting an amendment or correction of any FHFA or FHFA-OIG record, identify each particular record in question and the system of records in which the record is located, describe the amendment or correction that you want, and state why you believe that the record is not accurate, relevant, timely, or complete. You may submit any documentation that you think would be helpful, including an annotated copy of the record.

(e) How do I request for an accounting of disclosures? If you are requesting an accounting of disclosures by FHFA or FHFA-OIG of a record to another person, organization, or Federal agency, you must identify each particular record in question. An accounting generally includes the date, nature, and purpose of each disclosure, as well as the name and address of the person, organization, or Federal agency to which the disclosure was made, subject to § 1204.7.

(f) Must I verify my identity? Yes. When making requests under the Privacy Act, your request must verify your identity to protect your privacy or the privacy of the individual on whose behalf you are acting. If you make a Privacy Act request and you do not follow these identity verification procedures, FHFA or FHFA-OIG cannot and will not process your request.

(1) How do I verify my identity? To verify your identity, you must state your full name, current address, and date and place of birth. In order to help identify and locate the records you request, you also may, at your option, include your Social Security number. If you make your request in person and your identity is not known to either the FHFA or FHFA-OIG Privacy Act Officer, you must provide either two forms of unexpired identification with photographs issued by a federal, state, or local government agency or entity (i.e. passport, passport card, driver's license, ID card, etc.), or one form of unexpired identification with a photograph issued by a federal, state, or local government agency or entity (i.e. passport, passport card, driver's license, ID card, etc.) and a properly authenticated birth certificate. If you make your request by mail, your signature either must be notarized or submitted under 28 U.S.C. 1746,a. You may fulfill this requirement by having your signature on your request letter witnessed by a notary or by including the following statement just before the signature on your request letter: “I declare (or certify, verify, or state) under penalty of perjury that the foregoing is true and correct. Executed on [date]. [Signature].”

(2) How do I verify parentage or guardianship? If you make a Privacy Act request as the parent or guardian of a minor, or as the guardian of someone determined by a court to be incompetent, with respect to records or information about that individual, you must establish—

(i) The identity of the individual who is the subject of the record, by stating the individual's name, current address, date and place of birth, and, at your option, the Social Security number of the individual;

(ii) Your own identity, as required in paragraph (f)(1) of this section;

(iii) That you are the parent or guardian of the individual, which you may prove by providing a properly authenticated copy of the individual's birth certificate showing your parentage or a properly authenticated court order establishing your guardianship; and

(iv) That you are acting on behalf of the individual in making the request.