10.18—Accounting of certain disclosures.

(a) The system manager or his designee shall keep an accurate accounting of each disclosure of personal information about an individual from a system of records under his control which is made in accordance with § 10.17(b) of this part, except if that disclosure is to officers and employees of the Commission ( § 10.17(b)(2)) or is required under the Freedom of Information Act ( § 10.17(b)(3) ).
(b) This accounting of disclosure shall include:
(1) The date, nature, and purpose of each such disclosure; and
(2) The name and address of the person or agency to whom the disclosure is made.
(c) The system manager shall retain this accounting of disclosure for at least five years after the disclosure or for the life of the record, whichever is longer.
(d) The Commission shall make the accounting of disclosure available to the individual named in the record, at that individual's request, except when the disclosure was made under § 10.17(b)(8) of this part or when the record in question is exempt from the access provisions of the Privacy Act under §§ 10.21 and 10.22 of this part. An individual may request access to the accounting of disclosure by the procedure for requesting access to records that is explained in §§ 10.5 through 10.10 of this part.