(a) An investigation conducted for the purpose of determining suitability under this part may not be used for any other purpose except as provided in a Privacy Act system of records notice published by the agency conducting the investigation.

(b) Under OMB Circular No. A-130 Revised, issued November 20, 2000, agencies are to implement and maintain a program to ensure that adequate protection is provided for all automated information systems. Agency personnel screening programs may be based on procedures developed by OPM. The Computer Security Act of 1987 (Pub. L. 100-235) provides additional requirements for Federal automated information systems.

(c) OPM may set forth policies, procedures, criteria, standards, quality control procedures, and supplementary guidance for the implementation of this part in OPM issuances.