38 CFR § 1.466 - Security for records.
(a) Written records which are subject to §§ 1.460 through 1.499 of this part must be maintained in a secure room, locked file cabinet, safe or other similar container when not in use. Access to information stored in computers will be limited to authorized VA employees who have a need for the information in performing their duties. These security precautions shall be consistent with the Privacy Act of 1974 (5 U.S.C. 552a).