| |
Credit History |
Financial and Credit Card |
Medical |
Educational |
Video Rental |
Cable Viewing |
Telephone/Internet/
Email Content |
Telephone/ Internet/ Email Transactional |
Other Business Records |
| Notice of Government Collection/Access |
No - FCRA 625, 626 prohibit notice |
RFPA 12 U.S.C. 3404-3408, 3414, 3420; delayed notice permitted, 3409 |
No notice of individual disclosures under HIPAA regs; Patriot 215 prohibits notice |
No - FERPA 20 U.S.C. 1232g(b)(1)(J), (j), FERPA regs, 34 C.F.R. 99.31 |
Yes - 18 U.S.C. 2710(b) |
Yes - 47 U.S.C. 551(h) |
18 U.S.C. 2703, 2705 - notice sometimes required (stored); 2518 - delayed notice (real-time) |
18 U.S.C. 2703, 2709 - no notice required (stored); 3123 - notice prohibited (real-time) |
Notice prohibited, Patriot 215 |
| Standard for Government Access |
Very weak - FCRA 604(a)(1), 608, 625 and 626 |
Very weak - GLB 15 U.S.C. 6802(e), RFPA 3402, 3405-3408, 3413, 3414, Patriot 215 |
Very weak - HIPAA regs, 45 CFR 164.512(f), (k), and Patriot 215 |
Need specific and articulable facts, FERPA 20 U.S.C. 1232g(j)(2), or grand jury subpoena, 1232g(b)(1)(J) |
Yes, need probable cause to obtain video rental information - 2710(b) |
Yes, need clear & convincing evidence to obtain cable viewing information, 47 U.S.C. 551(h)(1) |
2518 - need probable cause (real-time), 2703 - sometimes need probable cause (stored) |
2709 - relevance standard (stored);
3123 - relevance standard (real-time) |
No - "sought for" standard, Patriot 215 |
| Use and Disclosure Limit |
FCRA 625 has limit but no limit if obtained via 626 |
RFPA 3412 & 3414 provide some limitations |
No, Privacy Act routine use exception |
FERPA 20 U.S.C. 1232g(j)(1) |
No, Privacy Act routine use exception |
No, Privacy Act routine use exception |
Disclosure permitted in many circumstances - 2517 (real-time) |
No, except 2709(d) |
No, Privacy Act routine use exception |
Data Quality/
Right to Correct |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
N/A |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
Normal accuracy requirements, Privacy Act, 5 U.S.C. 552a(e)(5), subject to LE/intel exception, (j), (k) |
| Security |
E-Gov Act, Title III (44 U.S.C. 3541-3549) |
E-Gov Act, Title III (44 U.S.C. 3541-3549) |
E-Gov Act, Title III (44 U.S.C. 3541-3549) |
E-Gov Act, Title III (44 U.S.C. 3541-3549) |
E-Gov Act, Title III (44 U.S.C. 3541-3549) |
E-Gov Act, Title III (44 U.S.C. 3541-3549) |
CALEA Sec. 105; E-Gov Act, Title III (44 U.S.C. 3541-3549) |
CALEA Sec. 105; E-Gov Act, Title III (44 U.S.C. 3541-3549) |
E-Gov Act, Title III (44 U.S.C. 3541-3549) |
| Access (Can Individual See What Has Been Collected About Himself?) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Judge may permit access, 2518(8)(d) (real-time); Privacy Act exceptions (j), (k); FOIA exception (b)(7) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Normal access rights, Privacy Act 552a(d), subject to LE/intel exception, (j), (k); FOIA exception (b)(7) |
Accountability/
Enforcement |
FCRA 625 |
Motion to quash, RFPA 3410; civil action, 3417, 3418 |
Privacy Act, 5 U.S.C. 552a(g) |
No - FERPA 20 U.S.C. 1232g(j) |
Civil action & exclusionary rule, 2710(c), (d) |
Can contest gov't attempt to access - 47 U.S.C. 551(h)(2) |
Civil action, 2707, 2712 (stored); exclusionary rule, 2518(10), & civil action, 2520-2521 (real-time) |
Civil action, 2707, 2712 (stored); penalty for knowing violation, 3121(d) (real-time) |
No |