FOIA and the Privacy Act

The Freedom of Information Act (FOIA) gives Americans the opportunity to gather information about government activities.

AmeriCorps' FOIA Regulations

AmeriCorps’ FOIA Team

Andrea Grill, Chief FOIA Officer, [email protected]
Stephanie Soper, FOIA Officer, [email protected]
Jana Maser, FOIA Appeals Officer, [email protected]
Kiara Rhodes, FOIA Public Liaison, [email protected]
Email Us: [email protected]

Submit your FOIA request to [email protected] (preferred), by mail to the address below, or by fax to 202-606-3467. If you submit by mail or fax, please include your email address for quick response.

FOIA Reports and Request Logs

Guidance on FOIA and the Privacy Act

This page was created to give basic guidance on the Freedom of Information Act (FOIA) and the Privacy Act of 1974 in a clear and plain manner in order to help the public exercise their rights. The questions and answers have been tailored to the FOIA and Privacy Act procedures of AmeriCorps. This guidance is not a comprehensive treatment of the complex issues associated with the FOIA and the Privacy Act. For more information, please see the U. S. Department of Justice's Guide to the FOIA and Overview of the Privacy Act.

The FOIA, enacted in 1966, as amended, generally provides that any person has a right of access to Federal agency records. This right of access is enforceable in court, except for those records that are protected from disclosure by the nine exemptions to the FOIA. These are discussed further down in the text.

The Privacy Act is closely related to the FOIA and is another Federal law about access to Federal government records. The Privacy Act establishes certain controls over how the executive branch agencies of the Federal government gather, maintain, and disseminate personal information. Like the FOIA, the Privacy Act can be used to get information, but it pertains only to records the Federal government keeps on individual citizens and lawfully admitted resident aliens that are stored in a system of records. The FOIA, on the other hand, covers all records under the custody and control of Federal executive branch agencies.

This information contains both general and AmeriCorps-specific information about the most significant provisions of the FOIA and the Privacy Act. We hope you find this information helpful.

The Freedom of Information Act

Please see FOIA.gov for extensive information about the Freedom of Information Act.

What information is available under the FOIA?
The FOIA provides access to all Federal agency records (or portions of those records), except those that are protected from release by nine specific exemptions (that is, reasons an agency may withhold records from a requester). The exemptions cover such material as (1) classified national defense and foreign relations information, (2) internal agency personnel rules and practices, (3) material prohibited from disclosure by another law, (4) trade secrets and other confidential business information, (5) certain inter-agency or intra-agency communications, (6) personnel, medical, and other files involving personal privacy, (7) certain records compiled for law enforcement purposes, (8) matters relating to the supervision of financial institutions, and (9) geological information on oil wells.

Under the FOIA, you may ask for and receive a copy of any record that is in Federal official files and is not covered by one of the exemptions. The request must be sent to the relevant agency.

When you make a FOIA request, you must describe the material you want as specifically as possible. If the agency, with a reasonable amount of effort, cannot identify what you have requested, it is under no obligation to you.

The FOIA does not require agencies to do research for you, to compile or analyze data, or to answer questions.

The FOIA does not apply to Congress or the courts, nor to state or local government records. It does not require private organizations or businesses to release any information directly to the public, even if that information has been submitted to the government. However, information that private firms submit to the Federal government may be available through a FOIA request, so long as the information is not a trade secret, confidential business information, or protected by some other exemption.

FOIA at AmeriCorps

How do I submit a FOIA request to AmeriCorps?
AmeriCorps has one centralized FOIA office for the entire agency, in the Office of the General Counsel. It is also responsible for processing Privacy Act requests. FOIA and Privacy Act requests can be sent to AmeriCorps in five ways:
(1) By email (preferred) to [email protected].
(2) By mail to:
AmeriCorps
Office of the General Counsel
Attn: Freedom of Information Act Officer
250 E Street, SW
Washington, DC 20525
Because Federal mail goes through a security screening process, it might take up to several weeks for your letter to reach us.
(3) By fax to (202) 606-3467. If you send your request by fax, make sure it contains your return address and a telephone contact number or email address.
(4) In person: You may deliver a FOIA request by hand between 9:00 a.m. and 4:00 p.m., Monday through Friday, except on Federal holidays.
(5) Through the National FOIA Portal at FOIA.gov.

What information does AmeriCorps need in a FOIA request?
Identify the records you want as specifically as possible. Although you do not have to give the document's name or title, your request must reasonably describe the records you seek. Any facts or clues which you can give us about the time, place, persons, events, subjects, or other details about the records you seek will be help agency personnel determine where to search and which records are responsive to your request. This can save you and the government time and money and improve your prospects for getting what you want. There is a sample request at the end of this page.

Keep a copy of your request. You may need it in the event of an appeal or if your original request is not answered.

Although FOIA does not require it, you may state your reason(s) for your request. (You should, however, always give the reason(s) for requesting a fee waiver.)

What does it cost to get records under the FOIA?
Depending on the nature of the requester, an agency may charge no fees, fees for searching for the material, or fees for search and review. AmeriCorps normally sends responses electronically, but if you want a paper copy, there may be fees for copying. The U. S. Department of Justice's Guide to the FOIA has an excellent section on fees. Search fees generally reflect salary levels of the personnel needed for the search. Actual costs can vary from agency to agency.

For non-commercial requests, AmeriCorps does not charge requesters for the first two hours of search time. AmeriCorps may waive further charges if the total cost is minimal.

You may ask AmeriCorps for a waiver or reduction of fees if you can show that the information you are seeking will, when released, contribute significantly to the public understanding of the operations or activities of the government. Simply asserting that, however, is not sufficient.

How long will it take to get a response to my request?
Federal agencies are required to answer your request for information within 20 working days of receipt (excluding Saturdays, Sundays, and holidays). If you have not received a reply by the end of that time, you may write a follow-up letter or telephone the agency to ask about the delay. Sometimes an agency may need more than 20 working days to find the records, examine them, possibly consult other persons or agencies, and decide whether it will disclose the requested records. If that is the case, the agency is required to inform you before the deadline. Agencies have the right to extend this period up to 10 more working days.

What happens if the agency refuses to give me the information?
An agency ordinarily will deny a FOIA request, in whole or in part, only if it has a serious practical problem with granting it, supported by a legal reason (that is, one of the FOIA exemptions) for denial. The agency must give you the reason (the exemption) for denial in writing and inform you of your right to appeal the decision.

How do I appeal a denial?
You should promptly send a letter notifying the agency that you want to appeal. The denial letter will tell you to whom you should send your appeal letter. AmeriCorps requires that appeals be made within 60 days from the date of AmeriCorps’ letter notifying you of our decision to deny your request for records.

To appeal, simply ask the agency to review your FOIA request and change its decision. State the reason(s) you believe that the denial was wrong. It will save time in acting on your appeal if you include copies of the original request for information and the agency's letter of denial. You do not need to enclose copies of any documents released to you.

The agency has 20 working days after it receives your appeal letter to respond. Under certain circumstances, it may also take an extension of up to 10 working days. If, however, an agency takes 10 extra days to deny your initial request, it is not be entitled to an extension on the appeal.

What can I do if my appeal is rejected?
If you are willing to invest the time and money, you may take the matter to court. You can file a FOIA lawsuit in either the U.S. District Court where you live, where you have your principal place of business, where the documents are kept, or in the District of Columbia. In court, the agency will have to prove that the withheld records, or the withheld portions of them, are covered by one of the exemptions listed in the FOIA. If you win a substantial portion of your case, the court may require the government to pay court costs and reasonable attorney's fees for you.

Can I ask for information about other people?
The FOIA contains a very important provision concerning personal privacy: Exemption 6. It protects you from others who may seek information about you, but AmeriCorps may also use it to deny a request if you seek information about others. The FOIA's Exemption 6 permits an agency to withhold information about individuals if disclosing it would be a "clearly unwarranted invasion of personal privacy." This includes, for example, almost all of the information in medical files and much of the information in personnel files. The FOIA’s Exemption 6 cannot be used to deny you access to information about yourself, only to deny you information about other persons.

To be covered by Exemption 6, the information requested must be (1) about an identifiable individual, (2) an invasion of the individual's privacy if disclosed to others, and (3) "clearly unwarranted" to disclose. Release of information about an individual is considered an invasion of privacy if he or she could reasonably object because of its personal nature or its possible adverse effects upon himself or herself or family.

Such information is not protected by Exemption 6 if the injury to the individual is outweighed by a public interest favoring disclosure. For example, home addresses are generally exempt from release for unspecified or random uses such as commercial solicitation but may be released to state income tax authorities for state law enforcement. If you were seeking information about a Federal employee's working status, an agency usually would disclose at least his or her name, grade, salary, job title, and permanent work location, but an agency will not usually disclose similar information about an employee of a private business. However, Federal employees do have some privacy protection. For example, if you want to see the details of an investigative report which led to an employee's demotion, an agency might decide that disclosure of these details is not justified on public interest grounds. This would be so even though the information generally would be available to the demoted employee.

Sample FOIA Request Letter

Date

AmeriCorps
Office of the General Counsel
Attn: FOIA Officer
250 E Street, SW
Washington, DC 20525

Dear Freedom of Information Act Officer:
Under the Freedom of Information Act, 5 U.S.C. subsection 552, I am requesting access to, or copies of, [identify the records as clearly and specifically as possible]. If there are any fees for processing this request, please let me know before you fulfill it. [Or: Please supply the records without informing me of the cost if the fees do not exceed $ ______, which I agree to pay.]

Optional: I am requesting this information because [state the reason(s) if you think it will help you obtain the information].

Optional: If you have any questions about handling this request, you may call me at __________.
Sincerely,

Name
Address

Privacy Act

What is the Privacy Act?
The federal government compiles a wide range of information on individuals. For example, if you were ever in the military or employed by a Federal agency, there should be records of your service. If you have ever applied for a Federal grant or received a student loan guaranteed by the government, you are probably the subject of a file. There are records on every individual who has ever paid income taxes or received a check from Social Security or Medicare.

The Privacy Act, passed by Congress in 1974, establishes certain controls over what personal information is collected by the federal government and how it is used. The Act guarantees three primary rights: (1) the right to see records about yourself, subject to the Privacy Act's exemptions, (2) the right to amend that record if it is inaccurate, irrelevant, untimely, or incomplete, and (3) the right to sue the government for violations of the statute, including permitting others to see your records except as specifically permitted by the Act.

The Privacy Act also provides for certain limitations on agency information practices, such as requiring that information about a person be collected directly from that person to the greatest practical extent; requiring agencies to ensure that their records are relevant, accurate, timely, and complete; and prohibiting agencies from maintaining information describing how an individual exercises his or her First Amendment rights unless the individual consents to it, a statute permits it, or it is within the scope of an authorized law enforcement investigation.

What information may I request under the Privacy Act?
The Privacy Act applies only to documents about individuals maintained by agencies in the executive branch of the Federal government. It applies to these records only if they are in a "system of records," which means they are retrieved by an individual's name, social security number, or some other personal identifier. In other words, the Privacy Act does not apply to information about individuals in records that are filed under other subjects, such as organizations or events, unless the agency also indexes and retrieves them by individual names or other personal identifiers. Like the FOIA, the Privacy Act mainly applies to records held by Federal agencies.

There are 10 exemptions to the Privacy Act under which an agency can withhold certain kinds of information from you. Examples of exempt records are those that contain classified information on national security or criminal investigations. Another exemption protects information that would identify a confidential source. For example, if an investigator questions someone about your qualifications for Federal employment, and that person agrees to answer only if his or her identity is protected, then an agency can withhold that person's name or any identifying information. The 10 exemptions are set out in the Act.

If you are interested in more details, you should read the Privacy Act in its entirety. You can also read more about the Act at this U.S. Department of Justice page. It is printed in the U.S. Code (Section 552a of Title 5), which can be found in many public and school libraries.

How do I submit a Privacy Act request to AmeriCorps?
AmeriCorps’ FOIA Officer also handles all Privacy Act requests, and Privacy Act requests can be submitted in the same ways as FOIA requests. Please see the FOIA section above for specific information.

How do I know if an agency has a file on me?
If you think AmeriCorps has a file pertaining to you, you may write to the FOIA Officer. Agencies are generally required to inform you, when you ask, whether they have files on you. In addition, agencies are required to report publicly the existence of all systems of records they keep on individuals. The Office of the Federal Register publishes a listing of each agency's systems of records notices, including exemptions, as well as its Privacy Act regulations.

What information do I have to provide to AmeriCorps to receive information?
Like other agencies, AmeriCorps requires some proof of identity before we will give you your records. This is intended to protect information about you from unauthorized release to someone other than you. Therefore, we recommend that you enclose proof of identity (such as a copy of your driver's license or other government-issued identification) with your full name and address. Do not send the original documents. Remember to sign your request for information, since your signature is a form of identification. If we need more proof of identity before releasing your files, we will let you know. Give as much information as possible as to why you believe AmeriCorps has records about you.

What about costs for getting records under the Privacy Act?
Under the Privacy Act, agencies can charge only for the cost of copying records for you, not for time spent locating them.

How long will it take to answer my request?
Under the terms of the Privacy Act, agencies are not required to reply to a request within a specific period of time. However, AmeriCorps will reply as quickly as it is able if it has the requested records in its own possession. For records that are in storage, we will acknowledge your request within ten workdays and send you the actual records as soon as possible. If you do not receive any response within four weeks or so, you might wish to write again, enclosing a copy of your original request.

What if I find that AmeriCorps has incorrect information about me in its records?
The Privacy Act requires that, if an agency maintains personal information about individuals, it must keep those files complete, accurate, timely, and relevant. If, after you see your file, you believe it contains incorrect information, you may write to AmeriCorps’ FOIA Officer and ask to have the information corrected. Include all pertinent documentation for each change you are requesting. We will tell you if we need further proof. The Privacy Act requires agencies to notify you within ten working days that they have received your amendment request.

If AmeriCorps grants your request for amendment, it will tell you exactly what it will do to amend the record. If AmeriCorps denies the request for the amendment, you may appeal that decision. Even if AmeriCorps denies your appeal, you have the right to submit a statement that explains why you think the record is wrong, and the agency must attach your statement to the relevant record. AmeriCorps must also tell you of your right to go to court and have a judge review the denial of your appeal.

What can I do if I am denied information requested under the Privacy Act?
There is no required procedure for Privacy Act appeals, but AmeriCorps will advise you of its own appeal procedure if it denies part or all of your request. If AmeriCorps denies your appeal, you may take the matter to court. If you win your case, you may be awarded court costs and attorney's fees.

Comparison of the FOIA and the Privacy Act

Although the two laws were enacted for different purposes, there is some similarity in their provisions. This chart outlines some of them:

A Comparison of the Freedom of Information Act and the Privacy Act
Freedom of Information Act	Privacy Act
Access Rights
To “any person”	Only for the individual who is the subject of the records sought
Applicable Records
All records of Federal agencies	Federal agency records in "systems of records" which contain information about an individual and are retrieved by the use of a name or other personal identifier
Fees
Depend on the nature of the requester and range from none to charges for search, review, and copying.	Only for copying records
Response Time
20 business days for simple requests, 30 days for complex requests, and requesters may ask for expedited handling (though agencies are not required to grant it)	Generally, within 10 business days, or, in the case of records stored off-site, agencies acknowledge the request within 10 workdays
Exemptions If you request records about yourself under both laws, Federal agencies may withhold the records from you only to the extent the records are exempt under both laws.
See Department of Justice guidance on FOIA exemptions.	See Department of Justice guidance on Privacy Act exemptions.
Which Act to Use? If you aren’t sure which law applies or would better suit your needs, you may refer to both in your request letter.
If you want information about the activities of Federal agencies or of another person, make your request under the FOIA, which covers all agency records. You can also use the FOIA to get records about yourself that are not in a Privacy Act "system of records"	If the information you want is about yourself and you wish to avoid possible search fees, make your request under the Privacy Act, which covers most agency records that are about individuals

Privacy Act Regulations

IMPLEMENTATION OF THE PRIVACY ACT OF 1974
45 CFR PART 2508
EFFECTIVE MAY 20, 1999

Sec.
2508.1 Definitions.
2508.2 What is the purpose of this part?
2508.3 What is the Corporation's Privacy Act policy?
2508.4 When can Corporation records be disclosed?
2508.5 When does the Corporation publish its notice of its system of records?
2508.6 When will the Corporation publish a notice for new routine uses of information in its system of records?
2508.7 To Whom does the Corporation provide reports to regarding changes in its system of records?
2508.8 Who is responsible for establishing the Corporation's rules of conduct for Privacy Act compliance?
2508.9 What officials are responsible for the security, management and control of Corporation record keeping systems?
2508.10 Who has the responsibility for maintaining adequate technical, physical, and security safeguards to prevent unauthorized disclosure or destruction of manual and automatic record systems?
2508.11 How shall offices maintaining a system of records be accountable for those records to prevent unauthorized disclosure of information?
2508.12 What are the contents of the systems of records that are to be maintained by the Corporation?
2508.13 What are the procedures for acquiring access to Corporation records by an individual about whom a record is maintained?
2508.14 What are the identification requirements for individuals who request access to records?
2508.15 What are the procedures for requesting inspection of, amendment or correction to, or appeal of an individual=s records maintained by the Corporation other than that individual's official personnel file?
2508.16 What are the procedures for filing an appeal for refusal to amend or correct records?
2508.17 When shall fees be charged and at what rate?
2508.18 What are the penalties for obtaining a record under false pretenses?
2508.19 What Privacy Act exemptions or control of systems of records are exempt from disclosure?
2508.20 What are the restrictions regarding the release of mailing lists?
Authority: 5 U.S.C. 552a; 42 U.S.C. 12501 et seq; 42 U.S.C. 4950 et seq.

§ 2508.1 Definitions
(a) Amend means to make a correction to, or expunge any portion of, a record about an individual which that individual believes is not accurate, relevant, timely, or complete.

(b) Appeal Officer means the individual delegated the responsibility to act on all appeals filed under the Privacy Act.

(d) Corporation means the Corporation for National and Community Service.

(e) Individual means any citizen of the United States or an alien lawfully admitted for permanent residence.

(f) Maintain means to collect, use, store, disseminate or any combination of these record-keeping functions; exercise of control over and therefore, responsibility and accountability for, systems of records.

(g) Personnel record means any information about an individual that is maintained in a system of records by the Corporation that is needed for personnel management or processes such as staffing, employment development, retirement, grievances, and appeals.

(h) Privacy Act Office means the individual delegated the authority to allow access to, the release of, or the withholding of records pursuant to an official Privacy Act request. The Privacy Act Officer is further delegated the authority to make the initial determination on all requests to amend records.

(i) Record means any document or other information about an individual maintained by the agency whether collected or grouped, and including, but not limited to, information regarding education, financial transactions, medical history, criminal or employment history, or any other personal information that contains the name or other personal identification number, symbol, etc. assigned to such individual.

(j) Routine use means, with respect to the disclosure of a record, the use of such record for a purpose which is compatible with the purpose for which it was collected.

(k) System of records means a group of any records under the maintenance and control of the Corporation from which information is retrieved by use of the name of an individual or by some personal identifier of the individual.

§ 2508.2 What is the purpose of this part?
The purpose of this part is to set forth the basic policies of the Corporation governing the maintenance of its system of records which contains personal information concerning its employees as defined in the Privacy Act (5 U.S.C. 552a). Records included in this part are those described in aforesaid act and maintained by the Corporation and/or any component thereof.

§ 2508.3 What is the Corporation's Privacy Act Policy?
It is the policy of the Corporation to protect, preserve, and defend the right of privacy of any individual about whom the Corporation maintains personal information in any system of records and to provide appropriate and complete access to such records including adequate opportunity to correct any errors in said records. Further, it is the policy of the Corporation to maintain its records in such a manner that the information contained therein is, and remains material and relevant to the purposes for which it is received in order to maintain its records with fairness to the individuals who are the subjects of such records.

§ 2508.4 When can corporation records be disclosed?
(a) (1) The Corporation will not disclose any record that is contained in its system of records by any means of communication to any person, or to another agency, except pursuant to a written request by, or with the prior written consent of the individual to whom the record pertains, unless disclosure of the record would be:
(i) To employees of the Corporation who maintain the record and who have a need for the record in the performance of their official duties;
(ii) When required under the provisions of the Freedom of Information Act (5 U.S.C. 552);
(iii) For routine uses as appropriately published in the annual notice of the Federal Register;
(iv) To the Bureau of the Census for purposes of planning or carrying out a census or survey or related activity pursuant to the provisions of title 13;
(v) To a recipient who has provided the Corporation with advance adequate written assurance that the record will be used solely as a statistical research or reporting record, and the record is to be transferred in a form that is not individually identifiable;
(vi) To the National Archives and Records Administration of the United States as a record which has sufficient historical or other value to warrant its continued preservation by the United States Government, or for evaluation by the Archivist of the United States or the designee of the Archivist to determine whether the record has such value;
(vii) To another agency or to an instrumentality of any governmental jurisdiction within or under the control of the United States for civil or criminal law enforcement activity if the activity is authorized by law, and if the head of the agency or instrumentality has made a written request to the Corporation for such records specifying the particular portion desired and the law enforcement activity for which the record is sought. Such a record may also be disclosed by the Corporation to the law enforcement agency on its own initiative in situations in which criminal conduct is suspected provided that such disclosure has been established as a routine use or in situations in which the misconduct is directly related to the purpose for which the record is maintained;
(viii) To a person pursuant to a showing of compelling circumstances affecting the health or safety of any individual if, upon such disclosure, notification is transmitted to the last known address of such individual;
(ix) To either House of Congress, or, to the extent of matter within its jurisdiction, any committee or subcommittee thereof, any joint committee of Congress or subcommittee of any such joint committee;
(x) To the Comptroller General or any of his or her authorized representatives, in the course of the performance of official duties in the General Accounting Office;
(xi) Pursuant to an order of a court of competent jurisdiction served upon the Corporation pursuant to 45 CFR 1201.3, and provided that if any such record is disclosed under such compulsory legal process and subsequently made public by the court which issued it, the Corporation must make a reasonable effort to notify the individual to whom the record pertains of such disclosure;
(xii) To a contractor, expert, or consultant of the Corporation (or an office within the Corporation) when the purpose of the release to perform a survey, audit, or other review of the Corporation's procedures and operations; and
(xiii) To a consumer reporting agency in accordance with section 3711(f) of title 31.

§ 2508.5 When does the Corporation publish its notice of its system of records?
The Corporation shall publish annually a notice of its system of records maintained by it as defined herein in the format prescribed by the General Services Administration in the Federal Register; provided, however, that such publication shall not be made for those systems of records maintained by other agencies while in the temporary custody of the Corporation.

§ 2508.6 When will the Corporation publish a notice for new routine uses of information in its system of records?
At least 30 days prior to publication of information under the preceding section, the Corporation shall publish in the Federal Register a notice of its intention to establish any new routine use of any system of records maintained by it with an opportunity for public comments on such use. Such notice shall contain the following:
(a) The name of the system of records for which the routine use is to be established.
(b) The authority for the system.
(c) The purpose for which the record is to be maintained.
(d) The proposed routine use(s).
(e) The purpose of the routine use(s).
(f) The categories of recipients of such use. In the event of any request for an addition to the routine uses of the systems which the Corporation maintains, such request may be sent to the following office:
AmeriCorps, Director, Administration and Management Services, Room 6100, 1201 New York Avenue, N.W., Washington, D.C. 20525.

§ 2508.7 To whom does the Corporation provide reports regarding changes in its system of records?
The Corporation shall provide to the Committee on Government Operations of the House of Representatives, the Committee on Governmental Affairs of the Senate, and the Office of Management and Budget, advance notice of any proposal to establish or alter any system of records as defined herein. This report will be submitted in accordance with guidelines provided by the Office of Management and Budget.

§ 2508.8 Who is responsible for establishing the Corporation's Rules of Conduct for Privacy Act Compliance?
(a) The Chief Executive Officer shall ensure that all persons involved in the design, development, operation or maintenance of any system of records as defined herein are informed of all requirements necessary to protect the privacy of individuals who are the subject of such records. All employees shall be informed of all implications of the Act in this area including the civil remedies provided under 5 U.S.C. 552a(g)(1) and the fact that the Corporation may be subject to civil remedies for failure to comply with the provisions of the Privacy Act and this regulation.

(b) The Chief Executive Officer shall also ensure that all personnel having access to records receive adequate training in the protection of the security of personal records, and that adequate and proper storage is provided for all such records with sufficient security to assure the privacy of such records.

§ 2508.9 What officials are responsible for the security, management and control of Corporation record keeping systems?
(a) The Director of Administration and Management Services shall have overall control and supervision of the security of all systems of records and shall be responsible for monitoring the security standards set forth in this regulation.

(b) A designated official (System Manager) shall be named who shall have management responsibility for each record system maintained by the Corporation and who shall be responsible for providing protection and accountability for such records at all times and for insuring that such records are secured in appropriate containers whenever not in use or in the direct control of authorized personnel.

§ 2508.10 Who has the responsibility for maintaining adequate technical, physical, and security safeguards to prevent unauthorized disclosure or destruction of manual and automatic record systems?
The Chief Executive Officer has the responsibility of maintaining adequate technical, physical, and security safeguards to prevent unauthorized disclosure or destruction of manual and automatic record systems. These security safeguards shall apply to all systems in which identifiable personal data are processed or maintained, including all reports and outputs from such systems that contain identifiable personal information. Such safeguards must be sufficient to prevent negligent, accidental, or unintentional disclosure, modification or destruction of any personal records or data, and must furthermore minimize, to the extent practicable, the risk that skilled technicians or knowledgeable persons could improperly obtain access to modify or destroy such records or data and shall further insure against such casual entry by unskilled persons without official reasons for access to such records or data.
(a) Manual systems.

Records contained in a system of records as defined herein may be used, held or stored only where facilities are adequate to prevent unauthorized access by persons within or outside the Corporation.
All records, when not under the personal control of the employees authorized to use the records, must be stored in a locked metal filing cabinet. Some systems of records are not of a such confidential nature that their disclosure would constitute a harm to an individual who is the subject of such record. However, records in this category shall also be maintained in locked metal filing cabinets or maintained in a secured room with a locking door.
Access to and use of a system of records shall be permitted only to persons whose duties require such access within the Corporation, for routine uses as defined in § 2508.4 as to any given system, or for such other uses as may be provided herein.
Other than for access within the Corporation to persons needing such records in the performance of their official duties or routine uses as defined in § 2508.4, or such other uses as provided herein, access to records within a system of records shall be permitted only to the individual to whom the record pertains or upon his or her written request to the Director, Administration and Management Services.
Access to areas where a system of records is stored will be limited to those persons whose duties require work in such areas. There shall be an accounting of the removal of any records from such storage areas utilizing a written log, as directed by the Director, Administration and Management Services. The written log shall be maintained at all times.
The Corporation shall ensure that all persons whose duties require access to and use of records contained in a system of records are adequately trained to protect the security and privacy of such records.
The disposal and destruction of records within a system of records shall be in accordance with rules promulgated by the General Services Administration.

(b) Automated systems.

Identifiable personal information may be processed, stored or maintained by automatic data systems only where facilities or conditions are adequate to prevent unauthorized access to such system in any form. Whenever such data, whether contained in punch cards, magnetic tapes or discs, are not under the personal control of an authorized person, such information must be stored in a locked or secured room, or in such other facility having greater safeguards than those provided for herein.
Access to and use of identifiable personal data associated with automated data systems shall be limited to those persons whose duties require such access. Proper control of personal data in any form associated with automated data systems shall be maintained at all times, including maintenance of accountability records showing disposition of input and output documents.
All persons whose duties require access to processing and maintenance of identifiable personal data and automated systems shall be adequately trained in the security and privacy of personal data.
The disposal and disposition of identifiable personal data and automated systems shall be done by shredding, burning or in the case of tapes or discs, degaussing, in accordance with any regulations now or hereafter proposed by the General Services Administration or other appropriate authority.

§ 2508.11 How shall offices maintaining a system of records be accountable for those records to prevent unauthorized disclosure of information?
(a) Each office maintaining a system of records shall account for all records within such system by maintaining a written log in the form prescribed by the Director, Administration and Management Services, containing the following information:

The date, nature, and purpose of each disclosure of a record to any person or to another agency. Disclosures made to employees of the Corporation in the normal course of their duties, or pursuant to the provisions of the Freedom of Information Act, need not be accounted for.
Such accounting shall contain the name and address of the person or agency to whom the disclosure was made.
The accounting shall be maintained in accordance with a system of records approved by the Director, Administration and Management Services, as sufficient for the purpose but in any event sufficient to permit the construction of a listing of all disclosures at appropriate periodic intervals.
The accounting shall reference any justification or basis upon which any release was made including any written documentation required when records are released for statistical or law enforcement purposes under the provisions of subsection (b) of the Privacy Act of 1974 (5 U.S.C. 552a).
For the purpose of this part, the system of accounting for disclosures is not a system of records under the definitions hereof and need not be maintained within a system of records.
Any subject individual may request access to an accounting of disclosures of a record. The subject individual shall make a request for access to an accounting in accordance with § 2508.13. An individual will be granted access to an accounting of the disclosures of a record in accordance with the procedures of this subpart which govern access to the related record. Access to an accounting of a disclosure of a record made under § 2508.13 may be granted at the discretion of the Director, Administration and Management Services.

§ 2508.12 What are the contents of the systems of record that are to be maintained by the Corporation?
(a) The Corporation shall maintain all records that are used in making determinations about any individual with such accuracy, relevance, timeliness, and completeness as is reasonably necessary to assure fairness to the individual in the determination;

(b) In situations in which the information may result in adverse determinations about such individual's rights, benefits and privileges under any Federal program, all information placed in a system of records shall, to the greatest extent practicable, be collected from the individual to whom the record pertains.

(c) Each form or other document that an individual is expected to complete in order to provide information for any system of records shall have appended thereto, or in the body of the document:

An indication of the authority authorizing the solicitation of the information and whether the provision of the information is mandatory or voluntary.
The purpose or purposes for which the information is intended to be used.
Routine uses which may be made of the information and published pursuant to § 2508.6.
The effect on the individual, if any, of not providing all or part of the required or requested information.

(d) Records maintained in any system of records used by the Corporation to make any determination about any individual shall be maintained with such accuracy, relevancy, timeliness, and completeness as is reasonably necessary to assure fairness to the individual in the making of any determination about such individual, provided however, that the Corporation shall not be required to update or keep current retired records.

(e) Before disseminating any record about any individual to any person other than an employee in the Corporation, unless the dissemination is made pursuant to the provisions of the Freedom of Information Act (5 U.S.C. 552), the Corporation shall make reasonable efforts to ensure that such records are, or were at the time they were collected, accurate, complete, timely and relevant for Corporation purposes.

(f) Under no circumstances shall the Corporation maintain any record about any individual with respect to or describing how such individual exercises rights guaranteed by the First Amendment of the Constitution of the United States, unless expressly authorized by statute or by the individual about whom the record is maintained, or unless pertinent to and within the scope of an authorized law enforcement activity.

(g) In the event any record is disclosed as a result of the order of a court of appropriate jurisdiction, the Corporation shall make reasonable efforts to notify the individual whose record was so disclosed after the process becomes a matter of public record.

§ 2508.13 What are the procedures for acquiring access to corporation records by an individual about whom a record is maintained?
(a) Any request for access to records from any individual about whom a record is maintained will be addressed to the Corporation for National and Community Service, Office of the General Counsel, Attn: Privacy Act Officer, Room 8200, 1201 New York Avenue, N.W., Washington, D.C. 20525, or delivered in person during regular business hours, whereupon access to his or her record, or to any information contained therein, if determined to be releasable, shall be provided.

(b) If the request is made in person, such individual may, upon his or her request, be accompanied by a person of his or her choosing to review the record and shall be provided an opportunity to have a copy made of any record about such individual.

(c) A record may be disclosed to a representative chosen by the individual as to whom a record is maintained upon the proper written consent of such individual.

(d) A request made in person will be promptly complied with if the records sought are in the immediate custody of the Corporation. Mailed requests or personal requests for documents in storage or otherwise not immediately available, will be acknowledged within 10 working days, and the information requested will be promptly provided thereafter.

(e) With regard to any request for disclosure of a record, the following procedures shall apply:

Medical or psychological records shall be disclosed to an individual unless, in the judgment of the Corporation, access to such records might have an adverse effect upon such individual. When such determination has been made, the Corporation may require that the information be disclosed only to a physician chosen by the requesting individual. Such physician shall have full authority to disclose all or any portion of such record to the requesting individual in the exercise of his or her professional judgment.
Test material and copies of certificates or other lists of eligibles or any other listing, the disclosure of which would violate the privacy of any other individual, or be otherwise exempted by the provisions of the Privacy Act, shall be removed from the record before disclosure to any individual to whom the record pertains.

§ 2508.14 What are the identification requirements for individuals who request access to records?
The Corporation shall require reasonable identification of all individuals who request access to records to ensure that records are disclosed to the proper person.
(a) In the event an individual requests disclosure in person, such individual shall be required to show an identification card such as a driver’s license, etc., containing a photo and a sample signature of such individual. Such individual may also be required to sign a statement under oath as to his or her identity, acknowledging that he or she is aware of the penalties for improper disclosure under the provisions of the Privacy Act.

(b) In the event that disclosure is requested by mail, the Corporation may request such information as may be necessary to reasonably ensure that the individual making such request is properly identified. In certain cases, the Corporation may require that a mail request be notarized with an indication that the notary received an acknowledgment of identity from the individual making such request.

(c) In the event an individual is unable to provide suitable documentation or identification, the Corporation may require a signed notarized statement asserting the identity of the individual and stipulating that the individual understands that knowingly or willfully seeking or obtaining access to records about another person under false pretenses is punishable by a fine of up to $5,000.
(d) In the event a requestor wishes to be accompanied by another person while reviewing his or her records, the Corporation may require a written statement authorizing discussion of his or her records in the presence of the accompanying representative or other persons.

§ 2508.15 What are the procedures for requesting inspection of, amendment or correction to, or appeal of an individual's records maintained by the Corporation other than that individual's official personnel file?
(a) A request for inspection of any record shall be made to the Director, Administration and Management Services. Such request may be made by mail or in person provided, however, that requests made in person may be required to be made upon a form provided by the Director of Administration and Management Services who shall keep a current list of all systems of records maintained by the Corporation and published in accordance with the provisions of this regulation. However, the request need not be in writing if the individual makes his or her request in person. The requesting individual may request that the Corporation compile all records pertaining to such individual at any named Service Center/State Office, AmeriCorps*NCCC Campus, or at Corporation Headquarters in Washington, D.C., for the individual's inspection and/or copying. In the event an individual makes such request for a compilation of all records pertaining to him or her in various locations, appropriate time for such compilation shall be provided as may be necessary to promptly comply with such requests.

(b) Any such requests should contain, at a minimum, identifying information needed to locate any given record and a brief description of the item or items of information required in the event the individual wishes to see less than all records maintained about him or her.

In the event an individual, after examination of his or her record, desires to request an amendment or correction of such records, the request must be submitted in writing and addressed to the Corporation for National and Community Service, Office of the General Counsel, Attn: Privacy Act Officer, Room 8200, 1201 New York Avenue, N.W., Washington, D.C. 20525. In his or her written request, the individual shall specify:
- The system of records from which the record is retrieved;
- The particular record that he or she is seeking to amend or correct;
- Whether he or she is seeking an addition to or a deletion or substitution of the record; and,
- His or her reasons for requesting amendment or correction of the record.
A request for amendment or correction of a record will be acknowledged within 10 working days of its receipt unless the request can be processed, and the individual informed of the Privacy Act Officer's decision on the request within that 10-day period.
If the Privacy Act Officer agrees that the record is not accurate, timely, or complete, based on a preponderance of the evidence, the record will be corrected or amended. The record will be deleted without regard to its accuracy, if the record is not relevant or necessary to accomplish the Corporation's function for which the record was provided or is maintained. In either case, the individual will be informed in writing of the amendment, correction, or deletion and, if accounting was made of prior disclosures of the record, all previous recipients of the record will be informed of the corrective action taken.
If the Privacy Act Officer does not agree that the record should be amended or corrected, the individual will be informed in writing of the refusal to amend or correct the record. He or she will also be informed that he or she may appeal the refusal to amend or correct his or her record in accordance with § 2508.17.
Requests to amend or correct a record governed by the regulation of another government agency will be forwarded to such government agency for processing and the individual will be informed in writing of the referral.

(c) In the event an individual disagrees with the Privacy Act Officer's initial determination, he or she may appeal such determination to the Appeal Officer in accordance with '§ 2508.17. Such request for review must be made within 30 days after receipt by the requestor of the initial refusal to amend.

§ 2508.16 What are the procedures for filing an appeal for refusal to amend or correct records?
(a) In the event an individual desires to appeal any refusal to correct or amend records, he or she may do so by addressing, in writing, such appeal to the Corporation for National and Community Service, Office of the Chief Operating Officer, Attn: Appeal Officer, 1201 New York Avenue N.W., Washington, D.C. 20525. Although there is no time limit for such appeals, the Corporation shall be under no obligation to maintain copies of original requests or responses thereto beyond 180 days from the date of the original request.

(b) An appeal will be completed within 30 working days from its receipt by the Appeal Officer; except that, the appeal authority may, for good cause, extend this period for an additional 30 days. Should the appeal period be extended, the individual appealing the original refusal will be informed in writing of the extension and the circumstances of the delay. The individual's request for access to or to amend or correct the record, the Privacy Act Officer's refusal to amend or correct the record, and any other pertinent material relating to the appeal will be reviewed. No hearing will be held.

(c) If the Appeal Officer determines that the record that is the subject of the appeal should be amended or corrected, the record will be amended or corrected, and the individual will be informed in writing of the amendment or correction. Where an accounting was made of prior disclosures of the record, all previous recipients of the record will be informed of the corrective action taken.

(d) If the appeal is denied, the subject individual will be informed in writing:

Of the denial and reasons for the denial;
That he or she has a right to seek judicial review of the denial; and
That he or she may submit to the Appeal Officer a concise statement of disagreement to be associated with the disputed record and disclosed whenever the record is disclosed.

(e) Whenever an individual submits a statement of disagreement to the Appeal Officer in accordance with paragraph (d)(3) of this section, the record will be annotated to indicate that it is disputed. In any subsequent disclosure, a copy of the subject individual's statement of disagreement will be disclosed with the record. If the appeal authority deems it appropriate, a concise statement of the Appeal Officer's reasons for denying the individual's appeal may also be disclosed with the record. While the individual will have access to this statement of reasons, such statement will not be subject to correction or amendment. Where an accounting was made of prior disclosures of the record, all previous recipients of the record will be provided a copy of the individual's statement of disagreement, as well as the statement, if any, of the Appeal Officer's reasons for denying the individual's appeal.

§ 2508.17 When shall fees be charged and at what rate?
(a) No fees shall be charged for search time or for any other time expended by the Corporation to review or produce a record except where an individual requests that a copy be made of the record to which he or she is granted access. Where a copy of the record must be made in order to provide access to the record (e.g., computer printout where no screen reading is available), the copy will be made available to the individual without cost.

(b) The applicable fee schedule is as follows:

Each copy of each page, up to 8 2" x 14", made by photocopy or similar process is $0.10 per page.
Each copy of each microform frame printed on paper is $0.25.
Each aperture card is $0.25.
Each 105-mm fiche is $0.25.
Each 100' foot role of 35-mm microfilm is $7.00.
Each 100' foot role of 16-mm microfilm is $6.00.
Each page of computer printout without regard to the number of carbon copies concurrently printed is $0.20.
Copying records not susceptible to photocopying (e.g., punch cards or magnetic tapes), at actual cost to be determined on a case-by-case basis.
Other copying forms (e.g., typing or printing) will be charged at direct costs, including personnel and equipment costs.

(c) All copying fees shall be paid by the individual before the copying will be undertaken. Payments shall be made by check or money order payable to the "Corporation for National and Community Service” and provided to the Privacy Act Officer processing the request.

(d) A copying fee shall not be charged or collected, or alternatively, it may be reduced, when it is determined by the Privacy Act Officer, based on a petition, that the petitioning individual is indigent and that the Corporation's resources permit a waiver of all or part of the fee. An individual is deemed to be indigent when he or she is without income or lacks the resources sufficient to pay the fees.

(e) Special and additional services provided at the request of the individual, such as certification or authentication, postal insurance and special mailing arrangement costs, will be charged to the individual.

(f) A copying fee totaling $5.00 or less shall be waived, but the copying fees for contemporaneous requests by the same individual shall be aggregated to determine the total fee.

§ 2508.18 What are the penalties for obtaining a record under false pretenses?
The Privacy Act provides, in pertinent part that:
(a) Any person who knowingly and willfully requests to obtain any record concerning an individual from the Corporation under false pretenses shall be guilty of a misdemeanor and find not more than $5,000 (5 U.S.C. 552a(I)(3)).

(b) A person who falsely or fraudulently attempts to obtain records under the Privacy Act also may be subject to prosecution under such other criminal statutes as 18 U.S.C. §§ 494, 495 and 1001.

§ 2508.19 What Privacy Act exemptions or control of systems of records are exempt from cisclosure?
(a) Certain systems of records that are maintained by the Corporation are exempted from provisions of the Privacy Act in accordance with exemptions (j) and (k) of 5 U.S.C. 552a.

Exemption of Inspector General system of records. Pursuant to, and limited by 5 U.S.C. 552a(j)(2), the system of records maintained by the Office of the Inspector General that contains the Investigative Files shall be exempted from the provisions of 5 U.S.C. 552a, except subsections (b), (c)(1) and (2), (e)(4)(A) through (F), (e)(6)(7), (9), (10), and (11), and (I), and 45 CFR Parts 2508.11, 2508.12, 2508.13, 2508.14, 2508.15, 2508.16, and 2508.17, insofar as the system contains information pertaining to criminal law enforcement investigations.
Pursuant to, and limited by 5 U.S.C. 552a(k)(2), the system of records maintained by the Office of the Inspector General that contains the Investigative Files shall be exempted from 5 U.S.C. 552a (c)(3), (d), (e)(1), (e)(4) (G), (H), and (I), and (f), and 45 CFR Parts 2508.11, 2508.12, 2508.13, 2508.14, 2508.15, 2508.16, and 2508.17, insofar as the system contains investigatory materials compiled for law enforcement purposes.

(b) Exemptions to the General Counsel system of records. Pursuant to, and limited by 5 U.S.C. 552a(d)(5), the system of records maintained by the Office of the General Counsel that contains the Legal Office Litigation/Correspondence Files shall be exempted from the provisions of 5 U.S.C. 552a(d)(5), and 45 CFR 2508.4, insofar as the system contains information compiled in reasonable anticipation of a civil action or proceeding.

§ 2508.20 What are the restrictions regarding the release of mailing lists?
An individual's name and address may not be sold or rented by the Corporation unless such action is specifically authorized by law. This section does not require the withholding of names and addresses otherwise permitted to be made public.

Electronic Reading Room

The Electronic Freedom of Information Act Amendments of 1996 (E-FOIA) contains a provision that requires agencies to permit the public to inspect and copy records that are likely to become the subject of multiple FOIA requests, provided the records were: (1) created after November 1, 1996; and (2) released under FOIA on or after March 31, 1997.

In furtherance of Executive Order #13392, "Improving Agency Disclosure of Information," Fernando Laguarda, General Counsel, is the Chief Freedom of Information Act Officer for AmeriCorps.

E-FOIA also requires agencies to make copies of records that will be the subject of multiple FOIA requests available electronically, so that people do not need to submit a written FOIA request to AmeriCorps for those records.

AmeriCorps Major Systems Inventory
Final Orders and Opinions - AmeriCorps does not have any documents in this category.
Policy Statements - AmeriCorps does not have any documents in this category.

AmeriCorps Official Guidance

FOIA and the Privacy Act

AmeriCorps’ FOIA Team

FOIA Reports and Request Logs

Fiscal Year 2025

Fiscal Year 2024

Fiscal Year 2023

Fiscal Year 2022

Fiscal Year 2021

Fiscal year 2020

Fiscal Year 2019