32 CFR § 1901.01 - Authority and purpose.

---
identifier: "/us/cfr/t32/s1901.01"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "32 CFR § 1901.01 - Authority and purpose."
title_number: 32
title_name: "National Defense"
section_number: "1901.01"
section_name: "Authority and purpose."
chapter_name: "CENTRAL INTELLIGENCE AGENCY"
part_number: "1901"
part_name: "PUBLIC RIGHTS UNDER THE PRIVACY ACT OF 1974"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "National Security Act of 1947, as amended; Central Intelligence Agency Act of 1949, as amended; Privacy Act, as amended; and Executive Order 12958 (or successor Orders)."
regulatory_source: "62 FR 32488, June 16, 1997, unless otherwise noted."
cfr_part: "1901"
---


# 1901.01 Authority and purpose.

(a) *Authority.* This part is issued under the authority of and in order to implement the Privacy Act of 1974 (5 U.S.C. 552a); sec. 102 of the National Security Act of 1947, as amended (50 U.S.C. 403); and sec. 6 of the Central Intelligence Agency Act of 1949, as amended (50 U.S.C. 403g).

(b) *Purpose in general.* This part prescribes procedures for a requester, as defined herein:

(1) To request notification of whether the Central Intelligence Agency maintains a record concerning them in any non-exempt portion of a system of records or any non-exempt system of records;

(2) To request a copy of all non-exempt records or portions of records;

(3) To request that any such record be amended or augmented; and

(4) To file an administrative appeal to any initial adverse determination to deny access to or amend a record.

(c) *Other purposes.* This part also sets forth detailed limitations on how and to whom the Agency may disclose personal information and gives notice that certain actions by officers or employees of the United States Government or members of the public could constitute criminal offenses.