Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Privacy Act
AI-generated illustration
LegislationUS

Privacy Act

1974 US law limiting how federal agencies collect and share personal records.

The Privacy Act was the challengers' main shield against DHS's bulk SAVE citizenship checks until 25 September 2026, when a 6-3 Supreme Court stay let the department restart the system before the midterms.

Last refreshed: 1 October 2026 · Appears in 1 active topic

Timeline for Privacy Act

View full timeline →

Background

The Privacy Act of 1974 (Pub. L. 93-579), codified at 5 U.S.C. 552a, governs the records federal agencies keep on individuals. Its central rule bars an agency from disclosing a record from a system of records to another person or agency without the individual's written consent, unless one of the Act's listed exceptions applies. The Computer Matching and Privacy Protection Act of 1988 added rules for automated matching of federal databases.

The Act is the main federal limit on how FAR agencies can pool what they know about citizens. That makes it the natural ground for challenging any programme that joins up federal files, from benefits databases to immigration records.

Bulk comparison of voter lists with federal data has made it a recurring question in election law. Its weight against other federal statutes in that setting was tested directly in 2026, when the Supreme Court sided with DHS at the stay stage.

Key Issues
Common Questions
What is the Privacy Act of 1974?
The Privacy Act of 1974, codified at 5 U.S.C. 552a, governs how federal agencies handle records about individuals. It bars an agency from disclosing a record from a system of records without the person's written consent unless a listed exception applies.Source: 5 U.S.C. 552a (law.cornell.edu)
Does the Privacy Act stop DHS using Social Security data to check voters?
Not for now. On 25 September 2026 the Supreme Court's majority read the 1996 immigration law IIRIRA as letting DHS and Social Security share citizenship data despite the Privacy Act, and let DHS restore its expanded SAVE checks while the appeal runs.Source: Supreme Court, No. 26A308 (25 September 2026)
What is the Computer Matching and Privacy Protection Act?
It is a 1988 amendment to the Privacy Act, Public Law 100-503, that added rules for automated matching programmes comparing federal records about individuals.Source: 5 U.S.C. 552a notes (law.cornell.edu)
Source Material