---
kind: "section"
citation: "25 C.F.R. § 273.181"
title: "25"
number: "273.181"
heading: "Are there Privacy Act requirements for contracts?"
url: "https://uscodex.org/cfr/25/273.181"
---

# §273.181. Are there Privacy Act requirements for contracts?

- (a) When a contractor operates a system of records to accomplish a Bureau function, the contractor must comply with [subpart K](/cfr/25/subpartK.md) of [43 CFR part 2](/cfr/43/part2.md) which implements the Privacy Act ([5 U.S.C. 552a](/usc/5/552a.md)). Examples of the contractor's responsibilities are:
  - (1) To continue maintaining systems of records declared by the Bureau to be subject to the Privacy Act;
  - (2) To make such records available to individuals involved;
  - (3) To disclose an individual's record to third parties only after receiving permission from the individual to whom the record pertains, and in accordance with the exceptions listed in [43 CFR 2.231](/cfr/43/2.231.md);
  - (4) To establish a procedure to account for access, disclosures, denials, and amendments to records; and
  - (5) **To provide safeguards for the protection of the records.**
- (b) The contractor may not, without prior approval of the Bureau:
  - (1) Discontinue or alter any established systems of records;
  - (2) Deny requests for notification or access of records; or
  - (3) **Approve or deny requests for amendments of records.**
- (c) The contractor may not establish a new system of records without prior approval of the Department of Interior and the Office of Management and Budget.
- (d) The contractor may not collect information about an individual unless it is relevant or necessary to accomplish a purpose of the Bureau as required by statute or Executive Order.
- (e) The contractor is subject to [5 U.S.C. 552a(i)(1)](/usc/5/552a.md?p=i-1), which imposes criminal penalties for knowingly and willfully disclosing a record about an individual without the written request or consent of that individual unless disclosure is permitted under one of the exceptions.

## Notes

### Authority

Authority: Secs. 201-203, Pub. L. 93-638, 88 Stat. 2203, 2213-2214 (25 U.S.C. 455-457), unless otherwise noted.

### Source

Source: 85 FR 10948, Feb. 25, 2020, unless otherwise noted.