14 CFR § 1212.600 - General policy.

In compliance with the Privacy Act and in accordance with the requirements and procedures of this regulation, NASA has an obligation to:

(a) Advise individuals, when requested, as to whether any specific system of records maintained by NASA contains records pertaining to them;

(b) Prevent records being maintained by NASA in a system of records for a specific purpose from being used or made available for another purpose without the individual's consent; and,

(c) Permit individuals to have access to information about themselves in a NASA system of records, to have a copy made, and, if appropriate under subpart 1212.3 of this part, to amend the records.