12 CFR § 792.64
Contracting for the operation of a system of records
November 10, 2020
(a) No NCUA component shall contract for the operation of a system of records by or on behalf of the Agency without the express approval of the NCUA Board.
(b) Any contract which is approved shall continue to ensure compliance with the requirements of the Privacy Act. The contracting component shall have the responsibility for ensuring that the contractor complies with the contract requirements relating to the Privacy Act.