AR 25-22 — The Army Privacy And Civil Liberties Program
AR 25-22 governs the Army Privacy and Civil Liberties Program and requirements for protecting personal information.
- Publication number: AR 25-22
- Title: THE ARMY PRIVACY AND CIVIL LIBERTIES PROGRAM
- Date: 09/30/2022
- Proponent: CIO
- Status: ACTIVE
View AR 25-22 on armypubs.army.mil
It addresses personally identifiable information, systems of records, access and amendment, disclosures, breaches, complaints, and training. It requires safeguards for records, Privacy Act Statements for certain collections, and reporting of unauthorized disclosures.
Applies to: This section applies to Army military, civilians, and contractors.
Topics covered
- Personally identifiable information
- Systems of records
- Privacy Act Statements
- Individual record access
- Record amendment
- Breach response
- Privacy and civil liberties complaints
Questions and answers
What must Army activities do when sharing PII with other agencies?
Impose conditions when sharing PII with other federal and non-federal agencies or entities (including the selection and implementation of particular security and privacy controls) that govern the creation, collection, use, processing, storage, maintenance, dissemination, disclosure, and disposal of the PII, where appropriate. (paragraph 1-1)
What information must a Privacy Act Statement provide?
A PAS notifies individuals of the authority, purpose, and use of the collection, whether the information is mandatory or voluntary, and the effects of not providing all or any part of the requested information. (paragraph 5-1)
When is disclosure of records from a system of records prohibited?
Disclosure of records pertaining to an individual from a system of records (SOR) is prohibited in the absence of the individuals consent except as authorized by the PA of 1974 and the FOIA. (paragraph 1-7)
How long does a custodian have to acknowledge an access request?
The custodian of the record will acknowledge requests for access made under the provisions of the PA within 10 working days of receipt. (paragraph 5-5)
When can an individual request to amend a record?
An individual may request to amend records that are retrieved by his or her name or personal identifier from a SOR unless the system has been exempted from the amendment provisions of the Act. (paragraph 8-1)