Privacy Act Data Cover Sheet

What Is a Privacy Act Data Cover Sheet?

The Privacy Act Data Cover Sheet (sometimes called a Privacy Act Request Form) is the standardized document that federal agencies use to record requests for records containing personal information. Its purpose is to provide a clear, auditable trail that demonstrates compliance with the Privacy Act, ensures proper handling of the records, and protects individuals rights to privacy.

The cover sheet is attached to every requestwhether the request originates from a member of the public, a federal employee, an attorney, or a courtand travels with the request through each stage of processing: intake, review, redaction, and final disposition.

Key Elements of the Cover Sheet

1. Requestor Information

• Name Full legal name of the individual making the request.
• Contact Details Mailing address, phone number, and email address.
• Agency Affiliation (if any) Required for internal requests.

2. Description of Records Sought

• Specific identifiers (file number, case number, project name, etc.).
• Time span covered (e.g., January12020 December312022).
• Any known titles, authors, or subjects that narrow the search.

3. Purpose of Request

The Privacy Act requires requestors to state why the records are needed. Common purposes include personal review, legal defense, research, or to correct inaccurate data.

4. Request Type

• Full Copy All records that meet the description.
• Partial Copy Only specific pages or sections.
• Summary/Excerpt A concise summary rather than the full document.

5. Confidentiality & Redaction Options

Requestors may indicate whether they want the agency to redact personal identifiers (Social Security numbers, medical info, etc.) or to provide a sensitive but unclassified (SBU) version of the records.

6. Signature & Date

A signed and dated cover sheet validates the request. Electronic signatures are accepted by most agencies when the request is submitted online.

How to Complete the Cover Sheet Correctly

1. Read the instructions Each agency may have a slightly different version; follow the agencyspecific guidance if provided.
2. Provide accurate contact information Agencies will send acknowledgments, requests for clarification, and final disposition notices to this address.
3. Be precise in the record description Vague requests slow processing and often result in partial fulfillment.
4. State a legitimate purpose The purpose must be lawful; agencies may deny a request that appears to be for harassment or commercial gain.
5. Choose the appropriate request type If you only need a summary, request it up front; this can reduce costs and processing time.
6. Specify any privacy preferences Indicate if you want personally identifying information removed before receipt.
7. Sign and date An unsigned form is considered incomplete and will be returned.

Common Reasons for Denial

Although the Privacy Act emphasizes openness, agencies may refuse to release records in the following circumstances:

• Records are classified under an executive order (e.g., national security).
• Disclosing the information would constitute a clearly unwarranted privacy intrusion.
• The request is too broad, vague, or not specific enough to locate the records.
• There is a pending litigation hold that prevents release.
• The requestis for commercial use without a proper statutory basis.

When a denial occurs, the agency must provide a written statement of the statutory exemption and information on how to appeal.

Timeline and Fees

Federal agencies must respond to a Privacy Act request within 20 business days of receipt. Extensions of up to 10 additional business days are permissible if the agency can demonstrate that it needs more time to locate or review records.

Agencies may charge reasonable fees for:

• Search and retrieval costs.
• Duplication (copying, printing, electronic formatting).
• Redaction or review time for privacy protection.

Requestors can request a fee waiver if the request is in the public interest and not for commercial profit.

Submitting the Cover Sheet

Most agencies accept the cover sheet through one of three channels:

• Electronic Portal Upload the PDF via the agencys FOIA/Privacy Act website.
• Mail Send a hardcopy to the designated Records Access Officer.
• InPerson Deliver to the agencys public information office.

When submitting electronically, ensure the file size stays under the portals limit (usually 1015 MB) or break the document into multiple parts.

Best Practices for Requestors

• Keep a log of dates, contacts, and correspondence for each request.
• Use clear, concise language; avoid legal jargon unless necessary.
• If you receive an incomplete response, file a status request referencing the original cover sheets tracking number.
• Consider reaching out to the agencys Privacy Act Officer for clarification before filing a formal appeal.

Additional Resources

• U.S. Department of Justice Privacy Act Overview
• National Archives Privacy Act Guidance
• Open Government FOIA and Privacy Act Resources