32 C.F.R. § 1901.01 – Authority and purpose.

(a) Authority. This part is issued under the authority of and in order to implement the Privacy Act of 1974 (5 U.S.C. 552a); sec. 102 of the National Security Act of 1947, as amended (50 U.S.C. 403); and sec. 6 of the Central Intelligence Agency Act of 1949, as amended (50 U.S.C. 403g).
(b) Purpose in general. This part prescribes procedures for a requester, as defined herein:
1. (1) To request notification of whether the Central Intelligence Agency maintains a record concerning them in any non-exempt portion of a system of records or any non-exempt system of records;
2. (2) To request a copy of all non-exempt records or portions of records;
3. (3) To request that any such record be amended or augmented; and
4. (4) To file an administrative appeal to any initial adverse determination to deny access to or amend a record.
(c) Other purposes. This part also sets forth detailed limitations on how and to whom the Agency may disclose personal information and gives notice that certain actions by officers or employees of the United States Government or members of the public could constitute criminal offenses.