CCI-003532

The organization publishes rules and regulations governing how individuals may request access to records maintained in a Privacy Act system of records.

Implementation Guidance

The organization being inspected/assessed provides for public access to records in systems of records IAW the SORN. PII not included in the Privacy Act System of Records may be accessed through a Freedom of Information Act Request. At a minimum the organization shall provide access to an individuals own PII IAW both DoDD 5400.11 and DoD 5400.11-R.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of how the organization provides an individual with access to his own PII to ensure the organization being inspected/assessed provides individuals access to his own PII IAW DoDD 5400.11 and DoD 5400.11-R.

Compelling Evidence

Supply documentation and reference on how the organization publishes rules governing how individuals may request access to records maintained in a Privacy Act System of Records.

The controls below (if any) were marked by NIST as being related to CCI-003532.