The Privacy Act of 1974 gives individuals the right to access and amend records that federal agencies maintain about them.

But not all records are open for review.

There are specific exemptions that allow agencies to withhold certain information in order to protect national security, law enforcement operations, and the integrity of government processes.

Why Exemptions Exist

Privacy Act exemptions are not designed to limit access without reason.

They exist to ensure that sensitive information is not disclosed in ways that could:

• Compromise national security
• Interfere with law enforcement investigations
• Undermine fair hiring and evaluation processes

These protections are essential to maintaining both security and fairness.

General Exemptions

These apply broadly to certain types of records maintained by specific agencies.

• (j)(1) – Records maintained by the Central Intelligence Agency, including intelligence sources and methods
• (j)(2) – Criminal law enforcement records maintained by agencies such as the FBI or DEA

Specific Exemptions

These apply to more targeted categories of sensitive information.

• (k)(1) – Classified information related to national defense or foreign policy
• (k)(2) – Records related to non-criminal law enforcement investigations
• (k)(3) – Protective service records, such as those involving the Secret Service
• (k)(4) – Statistical records used solely for research or analysis
• (k)(5) – Background investigation records used for federal employment or security clearances
• (k)(6) – Testing and examination materials used in federal hiring
• (k)(7) – Military service evaluations provided by confidential sources

Special Exemption

• (d)(5) – Records compiled in anticipation of civil litigation

Transparency Still Applies

Even when exemptions are used, agencies are not operating without oversight.

They are required to:

• Publicly declare applicable exemptions in their System of Records Notices (SORNs)
• Publish these notices in the Federal Register
• Apply exemptions consistently and in accordance with the law

This ensures transparency, even when access is limited.

An Important Distinction

Privacy Act exemptions do not operate in isolation.

When individuals request records that include personally identifiable information, agencies must often evaluate those records under both the Privacy Act and FOIA.

This dual review ensures that:

• Individuals receive appropriate access to their own information
• Sensitive data is protected from improper disclosure

The Bottom Line

Yes, the government can withhold certain records about you.

But those decisions are not arbitrary.

They are grounded in law, designed to balance access with protection, and subject to clear requirements for transparency and accountability.

Understanding these exemptions is key to understanding how your information is managed, protected, and, when appropriate, disclosed.