36 CFR § 1202.28 - What rules do NARA employees follow in managing personal information?

---
identifier: "/us/cfr/t36/s1202.28"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "36 CFR § 1202.28 - What rules do NARA employees follow in managing personal information?"
title_number: 36
title_name: "Parks, Forests, and Public Property"
section_number: "1202.28"
section_name: "What rules do NARA employees follow in managing personal information?"
chapter_name: "NATIONAL ARCHIVES AND RECORDS ADMINISTRATION"
subchapter_number: "A"
subchapter_name: "GENERAL RULES"
part_number: "1202"
part_name: "REGULATIONS IMPLEMENTING THE PRIVACY ACT OF 1974"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "5 U.S.C. 552a; 44 U.S.C. 2104(a)."
regulatory_source: "66 FR 65652, Dec. 20, 2001, unless otherwise noted."
cfr_part: "1202"
---


# 1202.28 What rules do NARA employees follow in managing personal information?

All NARA employees and contractors involved in the design, development, operation or maintenance of any system of records must review the provisions of the Privacy Act and the regulations in this part. NARA employees and contractors must conduct themselves in accordance with the rules of conduct concerning the protection of nonpublic information in the Standards of Ethical Conduct for Employees of the Executive Branch, 5 CFR 2635.703.