15 CFR § 2004.29 - Employee responsibilities under the Privacy Act.
At least annually, the Privacy Act Office will inform employees about the provisions of the Privacy Act, including the Act's civil liability and criminal penalty provisions. Unless otherwise permitted by law, a USTR employee must:
(c) Inform each individual from whom information is collected of:
(1) The legal authority to collect the information and whether providing it is mandatory or voluntary;
(2) The principal purpose for which USTR intends to use the information;
(4) The effects on the individual, if any, of not providing the information.
(d) Ensure that the employee's office does not maintain a system of records without public notice and notify appropriate officials of the existence or development of any system of records that is not the subject of a current or planned public notice.
(e) Maintain all records that are used in making any determination about an individual with such accuracy, relevance, timeliness and completeness as is reasonably necessary to ensure fairness to the individual in the determination.
(f) Except for disclosures made to an agency or under the FOIA, make reasonable efforts, prior to disseminating any record about an individual, to ensure that the record is accurate, relevant, timely and complete.