17 CFR § 200.312 - Specific exemptions.
Pursuant to section (k) of the Privacy Act of 1974, the Chairman of the Securities and Exchange Commission, with the concurrence of the Commission, has deemed it necessary to promulgate the following exemptions to specified provisions of the Privacy Act:
(a) Pursuant to, and limited by 5 U.S.C. 552a(k)(2), the following systems of records maintained by the Commission shall be exempted from 5 U.S.C. 552a(c)(3), (d), (e)(1), (e)(4)(G), (H), and (I), and (f) and 17 CFR 200.303, 200.304, and 200.306, insofar as they contain investigatory materials compiled for law enforcement purposes:
(1) Enforcement Files;
(2) Office of General Counsel Working Files;
(3) Office of the Chief Accountant Working Files;
(4) Name-Relationship Index System;
(6) Agency Correspondence Tracking System;
(7) Tips, Complaints, and Referrals (TCR) Records;
(8) SEC Security in the Workplace Incident Records; and
(9) Investor Response Information System (IRIS).
(b) Pursuant to 5 U.S.C. 552a(k)(5), the system of records containing the Commission's Disciplinary and Adverse Actions, Employee Conduct, and Labor Relations Files shall be exempt from sections (c)(3), (d), (e)(1), (e)(4)(G), (H), and (I), and (f) of the Privacy Act, 5 U.S.C. 552a(c)(3), (d), (e)(1), (e)(4)(G), (e)(4)(H), and (e)(4)(I), and (f), and 17 CFR 200.303, 200.304, and 200.306 insofar as they contain investigatory material compiled to determine an individual's suitability, eligibility, and qualifications for Federal civilian employment or access to classified information, but only to the extent that the disclosure of such material would reveal the identity of a source who furnished information to the Government under an express promise that the identity of the source would be held in confidence, or, prior to September 27, 1975, under an implied promise that the identity of the source would be held in confidence.