Penalties.
Penalties.
(1) All employees must guard against improper disclosure of records which are governed by the Privacy Act. Because of the serious consequences of improper invasions of personal privacy, employees may be subject to disciplinary action and criminal prosecution for knowing and willful violations of the Privacy Act and regulation. In addition, employees may also be subject to disciplinary action for unknowing or unwillful violations, where the employee had notice of the provisions of the Privacy Act and regulations and failed to inform himself or herself sufficiently or to conduct himself or herself in accordance with the requirements to avoid violations.
(2) SSA may be subjected to civil liability for the following actions undertaken by its employees:
(1) All employees must guard against improper disclosure of records which are governed by the Privacy Act. Because of the serious consequences of improper invasions of personal privacy, employees may be subject to disciplinary action and criminal prosecution for knowing and willful violations of the Privacy Act and regulation. In addition, employees may also be subject to disciplinary action for unknowing or unwillful violations, where the employee had notice of the provisions of the Privacy Act and regulations and failed to inform himself or herself sufficiently or to conduct himself or herself in accordance with the requirements to avoid violations.
(2) SSA may be subjected to civil liability for the following actions undertaken by its employees:
(a) Making a determination under the Privacy Act and ยงยง 401.65 and 401.70 not to amend an individual's record in accordance with his or her request, or failing to make such review in conformity with those provisions;
(b) Refusing to comply with an individual's request for notification of or access to a record pertaining to him or her;
(c) Failing to maintain any record pertaining to any individual with such accuracy, relevance, timeliness, and completeness as is necessary to assure fairness in any determination relating to the qualifications, character, rights, or opportunities of, or benefits to the individual that may be made on the basis of such a record, and consequently makes a determination which is adverse to the individual; or
(d) Failing to comply with any other provision of the Act or any rule promulgated thereunder, in such a way as to have an adverse effect on an individual.
(3) An employee may be personally subject to criminal liability as set forth below and in 5 U.S.C. 552a (i):
(a) Willful disclosure. Any officer or employee of SSA, who by virtue of his employment or official position, has possession of, or access to, agency records which contain individually identifiable information the disclosure of which is prohibited by the Privacy Act or by rules or regulations established thereunder, and who, knowing that disclosure of the specific material is so prohibited, willfully discloses the material in any manner to any person or agency not entitled to receive it, shall be guilty of a misdemeanor and may be fined not more than $5,000.
(b) Notice requirements. Any officer or employee of SSA who willfully maintains a system of records without meeting the notice requirements [of the Privacy Act] shall be guilty of a misdemeanor and may be fined not more than $5,000.
(c) Rules governing employees not working with systems of records. Employees whose duties do not involve working with systems of records will not generally disclose to any one, without specific authorization from their supervisors, records pertaining to employees or other individuals which by reason of their official duties are available to them. Notwithstanding the above, the following records concerning Federal employees are a matter of public record and no further authorization is necessary for disclosure:
(1) Name and title of individual.
(2) Grade classification or equivalent and annual rate of salary.
(3) Position description.
Source
20 CFR § A_to_part_401
Scoping language
General. All SSA employees are required to be aware of their responsibilities under the Privacy Act of 1974, 5 U.S.C. 552a. Regulations implementing the Privacy Act are set forth in this part. Instruction on the requirements of the Act and regulation shall be provided to all new employees of SSA. In addition, supervisors shall be responsible for assuring that employees who are working with systems of records or who undertake new duties which require the use of systems of records are informed of their responsibilities. Supervisors shall also be responsible for assuring that all employees who work with such systems of records are periodically reminded of the requirements of the Privacy Act and are advised of any new provisions or interpretations of the Act.