Privacy Act Introduction

The Privacy Act of 1974 (5 U.S.C. § 552a) establishes a code of fair information practices that governs the collection, maintenance, use, and dissemination of personally identifiable information about individuals.  The purpose of the law is to balance the government’s need to maintain information about individuals with the rights of individuals to be protected against unwarranted invasions of their privacy from the collection and disclosure of these records by federal agencies. 

The Privacy Act (PA) provides individuals with a right of access similar to that of the Freedom of Information Act (FOIA), as well as the right to request record amendment.  The statutes can overlap, but they also have separate applicability. The FOIA is entirely an access statute; it permits “any person” to seek access to any “agency record” that is not subject to any of its nine exemptions or its three exclusions. By contrast, the PA permits only an “individual” to seek access to only their own “records,” and only if those records are maintained by the agency within a “system of records.”  A PA “record” is generally information about an individual, maintained by an agency, and containing an identifying particular.  A “system of records” is a group of records maintained by an agency from which information is retrieved by some identifying particular.  Thus, the primary differences between the FOIA and the access provisions of the PA is: 1) the scope of information accessible under each statute, and 2) the PA allows individuals to request amendment to records, which the FOIA does not.  While many of DEA’s systems of records are exempt from the access and amendment provisions of the PA, DEA is required to review all PA requests under both the PA and the FOIA to provide an individual with proper access to agency records.

The PA prohibits disclosure of records without an individual’s written consent unless one of the twelve disclosure exceptions enumerated in the Act applies. These records are held in a PA system of records. A notice of any such system is published on DEA’s Privacy System Notices page.

As with the FOIA, the PA applies only to federal agencies and covers records in the possession and control of federal agencies.

Who Can Submit Privacy Act Request?
The PA allows citizens of the United States (U.S.), aliens lawfully admitted to the U.S. for permanent residence, and individuals from countries covered by the Judicial Redress Act of 2015 to request records that are retrievable by their name and/or other personal identifiers.  The PA also allows individuals to use a representative to make a request on their behalf.

How to Submit Privacy Act Request
We have streamlined DEA’s request process to better serve our requester community.  To submit a PA request for access to records pertaining to yourself, please visit the Public Access Link (PAL).  You must register to create an online profile or log into your existing profile to submit a request.  If you prefer to send your request via regular mail, please use the FOIA/PA Request Letter, provide proof of identify via the DOJ 361-Certification of Identity Form, and mail your request to the address listed below.  Please note, sending your request via PAL will ensure your request reaches our office immediately.  If you choose to send your request via regular mail, this will result in slower receipt and processing time by our office. 

If you are unable to send your request via the Public Access Link (PAL), please mail your request to:

Drug Enforcement Administration
Freedom of Information and Privacy Act Unit
Attn:  Intake Sub-Unit
8701 Morrissette Drive
Springfield, Virginia 22152

If you have any questions, you may contact the Requester Service Center at (571) 776-2300 or via e-mail at DEA.FOIA@dea.gov.

Requesting a Privacy Act Amendment or Correction

What is a Privacy Act Amendment or Correction?
The PA permits an individual to request an amendment of a DEA record they believe is not accurate, relevant, timely, or complete.  This right of amendment or correction applies only to individuals and information about such individuals.  Only factual information about an individual is subject to correction or amendment under this policy.  Records do not qualify for correction or amendment under this policy if the information is: (1) not contained in one of DEA’s systems of records; and (2) the record is exempt from the amendment provision of the PA (28 C.F.R. § 16.98) 

How to Submit a Privacy Act Amendment or Correction?
To submit a PA amendment or correction, please write a letter to the DEA explaining why you believe the information in question is not accurate, relevant, timely, or complete.  Identify the System of Records where you believe the information is located. View a complete list of DEA’s Systems of Records).  Please note that a requester bears the burden of proving by the preponderance of the evidence that information is not accurate, relevant, timely, or complete.

Submit your letter using one of the following options:
Option 1:  Email your submission to DEA.FOIA@dea.gov.  Please put “Request for Privacy Act Amendment or Correction” in the subject line of your email.
Option 2:  Mail your submission to:

Drug Enforcement Administration
Freedom of Information and Privacy Act Unit
Attn:  Intake Sub-Unit
8701 Morrissette Drive
Springfield, Virginia 22152