322.2—Definitions.
Access. The review of a record or a copy of a record or parts thereof in a system of records by an individual.
Confidential source. A person or organization who has furnished information to the federal government under an express promise that the person's or the organization's identity will be held in confidence or under an implied promise of such confidentiality if this implied promise was made before September 27, 1975.
Disclosure. The transfer of any personal information from a system of records by any means of communication (such as oral, written, electronic, mechanical, or actual review) to any person, private entity, or government agency, other than the subject of the record, the subject's designated agent or the subject's legal guardian.
Employees of NSA/CSS. Individuals employed by, assigned or detailed to the NSA/CSS. This part also applies to NSA/CSS contractor personnel who administer NSA/CSS systems of records that are subject to the Privacy Act.
FOIA Request. A written request for NSA/CSS records, made by any person, that either explicitly or implicitly invokes the Freedom of Information Act (FOIA) (5 U.S.C. 552 ), as amended. FOIA requests will be accepted by U.S. mail or its equivalent, facsimile, or the Internet, or employees of NSA/CSS may hand deliver them.
Individual. A living person who is a citizen of the United States or an alien lawfully admitted for permanent residence. The parent of a minor or the legal guardian of any individual also may act on behalf of an individual. Corporations, partnerships sole proprietorships, professional groups, businesses, whether incorporated or unincorporated, and other commercial entities are not individuals.
Maintain. Includes maintain, collect, use or disseminate.
Medical Records. Documents relating to the physical care and treatment of an individual.
Privacy Act Request. A written request containing a signature submitted by a U.S. citizen or alien admitted for permanent residence for access to or amendment of records on himself/herself which are contained in a PA system of records. PA requests will be accepted via mail or facsimile, or NSA/CSS employees may hand deliver them. Digital signatures will be accepted via the Internet by October 21, 2003. Until then, PA requests will not be accepted via the Internet. Requests received via the Internet will not be acknowledged. Regardless of whether the requester cites the FOIA, PA, or no law, the request for records will be processed under both this part and the FOIA. Requests for amendments will be processed pursuant to the PA.
Personal information. The collection of two or more pieces of information that is about an individual: e.g., name and date of birth, Social Security Number.
Personal notes. Notations created in paper or electronic form for the convenience and at the discretion of the originator, for the originator's eyes only, and over which NSA/CSS exercises no control. Personal notes are not agency records within the meaning of the Privacy Act (PA) or the Freedom of Information Act (FOIA). However, once the personal note, or information contained therein, is shared with another individual, it becomes an Agency record and is subject to the provisions of the FOIA and, if appropriate, the PA.
Psychological Records. Documents relating to the psychological care and treatment of an individual.
Record. Any item, collection, or grouping of information, whatever the storage media (paper, electronic, etc.) about an individual or his or her education, financial transactions, medical history, criminal or employment history, and that contains his or her name, or the identifying number, symbol, or other identifying particular assigned to the individual, such as a fingerprint, voice print, or a photograph. The record must be in existence and under the control of NSA/CSS at the time a request is made.
Routine use. The disclosure of a record outside NSA/CSS or the DoD for a use that is compatible with the purpose for which the information was collected and maintained by NSA/CSS. The routine use must be included in the published system of records.
System of Records. A group of records under the control of a federal agency from which personal information is retrieved by the individual's name or by some identifying number, symbol, or other identifying particular assigned to an individual