# 102.20 General provisions.
(a) *Purpose and scope.* This subpart implements the provisions of the Privacy Act of 1974, 5 U.S.C. 552a. These regulations apply to all records which are contained in systems of records maintained by the U.S. Small Business Administration (SBA) and that are retrieved by an individual's name or personal identifier. These regulations set forth the procedures by which individuals may request access to records about themselves, request amendment or correction of those records, and request an accounting of disclosures of those records by the SBA. These regulations also set forth the requirements applicable to SBA employees maintaining, collecting, using or disseminating records pertaining to individuals. This subpart applies to SBA and all of its offices and is mandatory for use by all SBA employees.
(b) *Definitions.* As used in this subpart:
(1) *Agency* means the U.S. Small Business Administration (SBA) and includes all of its offices wherever located;
(2) *Employee* means any employee of the SBA, regardless of grade, status, category or place of employment;
(3) *Individual* means a citizen of the United States or an alien lawfully admitted for permanent residence. This term shall not encompass entrepreneurial enterprises (e.g. sole proprietors, partnerships, corporations, or other forms of business entities);
(4) *Maintain* includes maintain, collect, use, or disseminate;
(5) *Record* means any item, collection, or grouping of information about an individual that is maintained by the SBA, including, but not limited to education, financial transactions, medical history, and criminal or employment history and that contains the individual's name, or an identifying number, symbol, or other identifying particular assigned to the individual such as a finger or voice print or photograph;
(6) *System of records* means a group of any records under the control of SBA from which information is retrieved by the name of the individual or by an identifying number, symbol, or other identifying particular assigned to the individual;
(7) *Statistical record* means a record in a system of records maintained for statistical research or reporting purposes only and not used in whole or in part in making any determination about an identifiable individual;
(8) *Routine use* means, with respect to the disclosure of a record, the use of such record for a purpose which is compatible with the purpose for which it was collected;
(9) *Request for access* to a record means a request made under Privacy Act subsection (d)(1) allowing an individual to gain access to his or her record or to any information pertaining to him or her which is contained in a system of records;
(10) *Request for amendment or correction* of a record means a request made under Privacy Act subsection (d)(2), permitting an individual to request amendment or correction of a record that he or she believes is not accurate, relevant, timely, or complete;
(11) *Request for an accounting* means a request made under Privacy Act subsection (c)(3) allowing an individual to request an accounting of any disclosure to any SBA officers and employees who have a need for the record in the performance of their duties;
(12) *Requester* is an individual who makes a request for access, a request for amendment or correction, or a request for an accounting under the Privacy Act; and
(13) *Authority to request records for a law enforcement purpose* means that the head of an Agency or a United States Attorney, or either's designee, is authorized to make written requests under subsection (b)(7) of the Privacy Act for records maintained by other agencies that are necessary to carry out an authorized law enforcement activity.