18 CFR 3b.203 - Rules of conduct.
(a) The Executive Director of the Commission has the overall administrative responsibility for implementing the provisions of the Privacy Act of 1974 and overseeing the conduct of all Commission employees with respect to the act.
(b) It is the responsibility of the Comptroller of the Commission, under the guidance of the Executive Director, to prepare the appropriate internal administrative procedures to assure that all persons involved in the design, development, or operation of any system of records, or in collecting, using, or disseminating any individual record, and who have access to any system of records, are informed of all rules and requirements of the Commission to protect the privacy of the individuals who are the subjects of the records, including the applicable provisions of the FERC Standards of Conduct for Employees, Special Government Employees and Commissioners.
(c) The Director, Human Resources Division, is responsible for establishing and conducting an adequate training program for such persons whose official duties require access to and collection, maintenance, use, and dissemination of such records.
(d) The General Counsel of the Commission is responsible for providing legal interpretation of the Privacy Act of 1974, and for preparing all agency rules and notices for official publication in compliance with the act.
(e) Commission employees will be informed of all the implications of their actions in this area, including especially:
(1) That there are criminal penalties for knowing and willful unauthorized disclosure of material within a system of records; for willful failure to publish a public notice of the existence of a system of records; and for knowingly and willfully requesting or obtaining records under false pretenses;
(2) That the Commission may be subject to civil suit due to failure to amend an individual's record in accordance with his request or failure to review his request in conformity with § 3b.224; refusal to comply with an individual's request of access to a record under § 3b.221; willful or intentional failure to maintain a record accurately pursuant to § 3b.201(b) and consequently a determination is made which is adverse to the individual; or willful or intentional failure to comply with any other provision of the Privacy Act of 1974, or any rule promulgated thereunder, in such a way as to have an adverse effect upon an individual.