§ 603.1 Purpose and scope.

(a) This part contain the rules the National Capital Planning Commission (NCPC) shall follow to implement a privacy program as required by the Privacy Act of 1974, 5 U.S.C. 552a (Privacy Act or Act) and the privacy provisions of the E-Government Act of 2002 (44 U.S.C. ch. 36) (E-Government Act). These rules should be read together with the Privacy Act and the privacy related provisions of the E-Government Act, which provide additional information respectively about Records maintained on individuals and protections for the privacy of personal information as agencies implement citizen-centered electronic Government.

(b) Consistent with the requirements of the Privacy Act, the rules in this part apply to all Records maintained by NCPC in a System of Records; the responsibilities of the NCPC to safeguard this information; the procedures by which Individuals may request notification of the existence of a record, request access to Records about themselves, request an amendment to or correction of those Records, and request an accounting of disclosures of those Records by the NCPC; and the procedures by which an Individual may appeal an Adverse Determination.

(c) Consistent with the privacy related requirements of the E-Government Act, the rules in this part also address the conduct of a privacy impact assessment prior to developing or procuring information technology that collects, maintains, or disseminates information in an identifiable form, initiating a new electronic collection of information in identifiable form for 10 or more persons excluding agencies, instrumentalities or employees of the federal government, or changing an existing System that creates new privacy risks.

(d) In addition to the rules in this part, the NCPC shall process all Privacy Act Requests for Access to Records in accordance with the Freedom of Information Act (FOIA), 5 U.S.C. 552, and part 602 of this chapter.