Securities Attorney for Going Public Transactions

Securities Lawyer Blog

knowledge itself is power

SEC Adopts Revisions To The Privacy Act

On September 20, 2023, the SEC approved final revisions to the Privacy Act, governing the handling of personal information in the federal government (See HERE for a review of the proposed rules).  The revisions codify current practices for processing requests for information made by the public under the Privacy Act and result in an entire re-write of the current rules.  The SEC last updated the Privacy Act in 2011.

Background

The Privacy Act is the principal law governing the handling of personal information in the federal government, regulating the collection, maintenance, use, and dissemination of information about individuals that is maintained in systems of records by federal agencies.  The Privacy Act also allows individuals to access information about them and provides a method to correct inaccurate records.

Final New Rules

The amended rules result in a complete rewrite of the Privacy Act to: (i) add a provision setting forth the process by which individuals may be provided with an accounting of disclosures made by the SEC; (ii) add a provision to codify the existing practice of providing 90 days to file an administrative appeal in response to a denial of a Privacy Act inquiry or request; (iii) allow for an electronic method to verify one’s identity; (iv) delete certain existing provisions that are duplicative and unnecessary; (v) reorganize certain provisions; and (vi) update the fee provisions.

The amended rules also: (i) clarify the purpose and scope of the regulation; (ii) update definitions and processes for submitting and receiving information requests and responses (including shortening timelines); (iii) update the administrative appeal process; (iv) create an online digital system; (v) update agency contact information; and (vi) update the list of rules that are exempt from the Privacy Act.  The new rules also update the fee provisions to match the existing fees on the Office of FOIA Services fee page.

The rules will also eliminate certain outdated provisions (such as requests for medical records) and add provisions for processing requests by an individual for an accounting of certain record disclosures about the requester, to include the date, nature, and purpose of each disclosure, that the SEC has made available to another person, organization, or agency.

Gayatri Gupta