(a) This part contains rules and procedures followed by OSC in processing requests for records under the Privacy Act. Further information about access to OSC records generally is available on OSC's website at https://osc.gov/Privacy.

(b) This part implements the Privacy Act of 1974, codified at 5 U.S.C. 552a, by establishing OSC policies and procedures for the release of records and maintenance of certain systems of records. See 5 U.S.C. 552a(f). This part also establishes policies and procedures for an individual to correct or amend their record if they believe it is not accurate, timely, complete, or relevant or necessary to accomplish an OSC function.

(c) OSC personnel protected by the Privacy Act include all staff, experts, contractors, consultants, volunteers, interns, and temporary employees.

(d) Other individuals engaging with OSC protected by the Privacy Act include, but are not limited to, PPP complainants, subjects of PPP complaints, Hatch Act complainants, subjects of Hatch Act complaints, Hatch Act advisory opinion requesters, whistleblowers filing disclosures under 5 U.S.C. 1213, and USERRA complainants, and the subjects of USERRA complaints.

(e) This part does not:

(1) Apply to OSC record systems that are not Privacy Act Record Systems.

(2) Make any records available to individuals other than:

(i) individuals who are the subjects of the records (“subject individuals”);

(ii) individuals who can prove they have the consent of the subject individual; or

(iii) individuals acting as legal representatives on behalf of such subject individuals.

(3) Make available information compiled by OSC in reasonable anticipation of court litigation or formal administrative proceedings. The availability of such information, including to any subject individual or party to such litigation or proceeding, shall be governed by applicable constitutional principles, rules of discovery, privileges, and part 1820 of this chapter; or

(4) Apply to personnel records maintained by the Human Capital Office of OSC. Those records are subject to regulations of the Office of Personnel Management in 5 CFR parts 293, 294, and 297.

As used in this part:

Access means availability of a record to a subject individual.

Disclosure means the availability or release of a record.

Maintain means to maintain, collect, use, or disseminate when used in connection with the term “record;” and to have control over or responsibility for a system of records when used in connection with the term “system of records.”

Notification means communication to an individual whether or not they are a subject individual.

Record means any item, collection, or grouping of information about an individual that is maintained by OSC, including, but not limited to, the individual's education, financial transactions, medical history, criminal, or employment history, that contains a name or an identifying number, symbol, or other identifying particular assigned to the individual. When used in this part, record means only a record that is in a system of records.

Release means making available all or part of the information or records contained in an OSC system of records.

Responsible OSC official means the officer listed in a notice of a system of records as the system manager or another individual listed in the notice of a system of records to whom requests may be made, or the designee of either such officer or individual.

Subject individual means that individual to whom a record pertains.

System of records means any group of records under the control of OSC from which a record is retrieved by personal identifier such as the name of the individual, number, symbol or other unique retriever assigned to the individual. Single records or groups of records which are not retrieved by a personal identifier are not part of a system of records. See 5 U.S.C. 552a(a)(5).

(a) Submission of requests. A request for OSC records under the Privacy Act must be made in writing. The request must be sent:

(1) By email to: [email protected]; or

(2) By mail to: U.S. Office of Special Counsel, Chief Privacy Officer, 1730 M Street NW, Suite 218, Washington, DC 20036-4505.

(3) Both the request letter and envelope or email should clearly be marked “Privacy Act Request.” A Privacy Act request is deemed received by OSC when it reaches the Chief Privacy Officer.

(b) Description of records sought. Requestors must describe the records sought in enough detail for OSC to locate them with a reasonable amount of effort, including, where known, data such as the date, title or name, author, recipient, and subject matter of the requested record.

(c) Proof of identity. OSC requires proof of identity from requestors seeking their own files, preferably a government-issued document bearing the subject individual's photograph. OSC requires a signed consent from the subject individual to release records to an individual's representative.

(d) Freedom of Information Act processing. OSC also processes all Privacy Act requests for access to records under the Freedom of Information Act, 5 U.S.C. 552, by following the rules contained in part 1820 of this chapter.

When a request for access involves medical records that are not otherwise exempt from disclosure, OSC may advise the requesting individual that OSC will only provide the records to a licensed health care professional the individual designates in writing. Upon receipt of the designation, the licensed health care professional will be permitted to review the records or to receive copies by mail upon proper verification of identity.

(a) Submission of requests. Individuals may request amendment of records pertaining to them that are subject to amendment under the Privacy Act and this part. The request must be sent:

(1) By email to: [email protected]; or

(2) By mail to: Chief Privacy Officer, U.S. Office of Special Counsel, 1730 M Street NW, Suite 218, Washington, DC 20036-4505.

(3) Both the request letter and envelope or email should be clearly marked “Privacy Act Amendment Request.” Whether sent by mail or email, a Privacy Act amendment request is considered received by OSC when it reaches the Chief Privacy Officer.

(b) Description of amendment sought. Requests for amendment should include the identification of the records together with a statement of the basis for the requested amendment and all available supporting documents and materials. The request needs to articulate whether information should be added, deleted, or substituted with another record and clearly articulate the reason for believing that the record should be corrected or amended.

(c) Proof of identity. Rules and procedures set forth in § 1830.3 apply to requests made under this section.

(d) Acknowledgement and response. Requests for amendment shall be acknowledged by OSC no later than ten (10) business days after receipt by the Chief Privacy Officer and a determination on the request shall be made promptly.

(e) What will not change. The Privacy Act amendment or correction process will not be used to alter, delete, or amend information which is part of a determination of fact or which is evidence received in the record of a claim in any form of an administrative appeal process. Disagreements with these determinations are to be resolved through the assigned OSC Program Office.

(f) Notice of error. If the record is wrong, OSC will correct it promptly. If wrong information was disclosed from the record, we will tell those of whom we are aware received that information that it was wrong and will give them the correct information. This will not be necessary if the change is not due to an error—e.g., a change of name or address.

(g) Record found to be correct. If the record is correct, OSC will inform the requestor in writing of the reason why we refuse to amend the record, the right to appeal the refusal, and the name and address of the official to whom the appeal should be sent.

(h) Record of another government agency. If you request OSC to correct or amend a record governed by the regulation of another government agency, we will forward your request to such government agency for processing and we will inform you in writing of the referral.

(a) Appeals of adverse determinations. A requestor may appeal a denial of a Privacy Act request for access to or amendment of records to OSC's Office of General Counsel. The appeal must be in writing and be sent:

(1) By email to: [email protected]; or

(2) By mail to: U.S. Office of Special Counsel, Office of General Counsel, 1730 M Street NW, Suite 218, Washington, DC 20036-4505.

(3) The appeal must be received by the Office of General Counsel within 45 calendar days of the date of the letter denying the request. Both the appeal letter and envelope or email should be clearly marked “Privacy Act Appeal.” An appeal is considered received by OSC when it reaches the Office of General Counsel. The appeal letter may include as much or as little related information as the requestor wishes, as long as it clearly identifies OSC's determination (including the assigned request number, if known) being appealed. An appeal ordinarily will not be acted on if the request becomes a matter of litigation.

(b) Responses to appeals. OSC's decision on an appeal will be made in writing. A final determination will be issued within 20 business days—unless OSC shows good cause to extend the 20-day period.

OSC exempts investigatory material from records subject to Privacy Act record requests or requests to amend records. This exemption aims to prevent interference with OSC's inquiries into matters under its jurisdiction, and to protect identities of confidential sources of information. OSC also reserves the right to assert exemptions for records received from another agency that could be properly claimed by that agency. OSC may exempt any information compiled in reasonable anticipation of a legal action or proceeding.

Requests for records under this section shall be subject to the fees set forth in part 1820 of this chapter.

OSC will maintain an accounting of all releases of a record for six (6) years or for the life of the record in accordance with the General Records Schedule, whichever is longer—except that, we will not make an accounting for releases:

(a) Of a subject individual's records record made with the subject individual's consent;

(b) To employees of OSC who have a need for the record to perform their duties; and

(c) Required under the Freedom of Information Act, 5 U.S.C. 552, and part 1820 of this chapter.

OSC shall not release any record that is contained in a system of records to any individual or to another agency, except as follows:

(a) Consent to release by the subject individual. Except as provided in paragraphs (b) and (c) of this section authorizing releases of records without consent, no release of a record will be made without the consent of the subject individual. The consent shall be in writing and signed by the subject individual. The consent shall specify the individual, agency, or other entity to whom the record may be released, which record may be released and, where applicable, during which time frame the record may be released. The subject individual's identity and, where applicable, the identity of the individual to whom the record is to be released shall be verified as set forth in § 1830.3(c).

(b) Releases without the consent of the subject individual. The releases listed in this paragraph may be made without the consent of the subject individual, including:

(1) To employees and contractors of the Office of Special Counsel who have a need for the record to perform their duties.

(2) As required by the Freedom of Information Act, 5 U.S.C. 552, and part 1820 of this chapter.

(3) To the entities listed in in the Privacy Act at 5 U.S.C. 552a(b)(1) through (12).