IP-2a.: Provides individuals the ability to have access to their personally identifiable information (PII) maintained in its system(s) of records;
IP-2b.: Publishes rules and regulations governing how individuals may request access to records maintained in a Privacy Act system of records;
IP-2c.: Publishes access procedures in System of Records Notices (SORNs); and
IP-2d: Adheres to Privacy Act requirements and OMB policies and guidance for the proper processing of Privacy Act requests.
Access affords individuals the ability to review PII about them held within organizational systems of records. Access includes timely, simplified, and inexpensive access to data. Organizational processes for allowing access to records may differ based on resources, legal requirements, or other factors. The organization Senior Agency Official for Privacy (SAOP)/Chief Privacy Officer (CPO) is responsible for the content of Privacy Act regulations and record request processing, in consultation with legal counsel. Access to certain types of records may not be appropriate, however, and heads of agencies may promulgate rules exempting particular systems from the access provision of the Privacy Act. In addition, individuals are not entitled to access to information compiled in reasonable anticipation of a civil action or proceeding.