Privacy Act Introduction

The Privacy Act of 1974 (5 U.S.C. § 552a) establishes a code of fair information practices that governs the collection, maintenance, use, and dissemination of personally identifiable information about individuals.  The purpose of the law is to balance the government’s need to maintain information about individuals with the rights of individuals to be protected against unwarranted invasions of their privacy from the collection and disclosure of these records by federal agencies. 

The Privacy Act provides individuals with a right of access similar to that of the FOIA, as well as the right to request record amendment.  The statutes can overlap, but they also have separate applicability. The FOIA is entirely an access statute; it permits “any person” to seek access to any “agency record” that is not subject to any of its nine exemptions or its three exclusions. By contrast, the PA permits only an “individual” to seek access to only their own “records,” and only if those records are maintained by the agency within a “system of records.”  A PA “record” is generally information about an individual, maintained by an agency, and containing an identifying particular. A “system of records” is a group of records maintained by an agency from which information is retrieved by some identifying particular. Thus, the primary differences between the FOIA and the access provisions of the PA is: 1) the scope of information accessible under each statute, and 2) the PA allows individuals to request amendment to records, which the FOIA does not. While many of DEA’s systems of records are exempt from the access and amendment provisions of the PA, DEA is required to review all PA requests under both the PA and the FOIA to provide an individual with proper access to agency records.

The Privacy Act prohibits disclosure of records without an individual’s written consent unless one of the twelve disclosure exceptions enumerated in the Act applies. These records are held in a Privacy Act system of records. A notice of any such system is published on DEA’s Privacy System Notices page.

As with the Freedom of Information Act (FOIA), the Privacy Act binds only federal agencies, and covers only records in the possession and control of federal agencies.

Who Can Submit Privacy Act Request?
The Privacy Act allows citizens of the United States (U.S.), aliens lawfully admitted to the U.S. for permanent residence, and individuals from countries covered by the Judicial Redress Act of 2015 to request records that are retrievable by their name and/or other personal identifiers.  The Privacy Act also allows individuals to use a representative to make a request on their behalf.

How to Submit Privacy Act Request

To submit a Privacy Act request, please visit DEA’s FOIA Public Access Link (PAL). You must register to create an online profile or log into your existing profile to submit a FOIA/PA request.  If you prefer to send your request via regular mail, please use the FOIA/PA Request Letter, provide proof of identify via the DOJ 361-Certification of Identity Form, and mail your request to the address listed below.  If you have any questions, you may contact the Freedom of Information and Privacy Act Section at (571) 776-2300 or via e-mail at DEA.FOIA@dea.gov.

Mail requests to:

Drug Enforcement Administration
Freedom of Information and Privacy Act Section
Attn:  Intake Unit
8701 Morrissette Drive
Springfield, Virginia 22152

Requesting a Privacy Act Amendment or Correction

What is a Privacy Act Amendment or Correction?
The Privacy Act permits an individual to request an amendment of a DEA record they believe is not accurate, relevant, timely, or complete.  This right of amendment or correction applies only to individuals and information about such individuals. Only factual information about an individual is subject to correction or amendment under this policy.  Records do not qualify for correction or amendment under this policy if the information is: (1) not contained in one of DEA’s systems of records; and (2) the record is exempt from the amendment provision of the Privacy Act (28 C.F.R. § 16.98)  

How to Submit a Privacy Act Amendment or Correction?
To submit a Privacy Act amendment or correction, please write a letter to the DEA explaining why you believe the information in question is not accurate, relevant, timely, or complete.  Identify the System of Records where you believe the information is located. View a complete list of DEA’s Systems of Records).  Please note that a requester bears the burden of proving by the preponderance of the evidence that information is not accurate, relevant, timely, or complete.

Submit your letter using one of the following options:
Option 1:  Email your submission to DEA.FOIA@usdoj.gov
Option 2:  Mail your submission to:

Drug Enforcement Administration
Freedom of Information and Privacy Act Section
Attn:  Intake Unit
8701 Morrissette Drive
Springfield, Virginia 22152