22 CFR 308.8
§ 308.8 Rules of conduct.
United States · 22 CFR — Foreign Relations · Status: effective
Cite this
- Citation
- 22 CFR 308.8, § 308.8 Rules of conduct, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/94882
- Permanent ID
ys:prov:94882@1- SHA-256
a5adc6c7063039a0493bf62e51b3767d83b903ec55e52468a65793bff7d352c7
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
(a) The head of the agency shall assure that all persons involved in the design, development, operation or maintenance of any systems of records as defined herein are informed of all requirements necessary to protect the privacy of individuals who are the subject of such records. All employees shall be informed of all implications of the Act in this area including the criminal penalties provided under the Act, and the fact the agency may be subject to civil suit for failure to comply with the provisions of the Privacy Act and these regulations.
(b) The head of the agency shall also ensure that all personnel having access to records receive adequate training in the protection of the security of personal records and that adequate and proper storage is provided for all such records with sufficient security to assure the privacy of such records.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.