Can I request records about myself under FOIA or do I have to use the Privacy Act?

Short answer: you can use either law, and in practice you often should cite both. When you ask a U.S. federal agency for records about yourself, the Freedom of Information Act (FOIA) and the Privacy Act of 1974 give you overlapping but not identical rights. Agencies routinely process first-party requests under both statutes to give you the broadest possible access.

Two laws, two purposes

• FOIA is a general public-access law. Anyone can request agency records, regardless of who the records are about. It applies broadly but allows agencies to withhold information under specific exemptions.
• The Privacy Act is narrower and personal. It lets an individual request and, in some cases, amend records that an agency keeps about them within a “system of records” retrieved by the person’s name or identifier. It generally applies to U.S. citizens and lawful permanent residents.

Why request under both

The two laws have different exemptions and procedures. Information an agency may withhold under one statute can sometimes be released under the other. Because of this, agencies typically treat a request for your own records as made under both FOIA and the Privacy Act and release whatever either law permits. Stating both in your request is a common best practice.

Practical tips

• Identify yourself clearly. First-party requests usually require proof of identity (and sometimes a signature or notarization) so the agency can confirm you are the subject of the records.
• Be specific. Describe the records, the time period, and the office or program likely to hold them. This speeds processing under either law.
• Know the limits. Some records are exempt from disclosure (for example, certain law-enforcement or classified materials), and the Privacy Act covers only federal agencies, not state or local governments or private companies.
• Check state law. State public-records and privacy statutes vary widely and operate separately from these federal laws.

For records professionals, the practical takeaway is that FOIA and the Privacy Act work together: train requesters and intake staff to invoke both so individuals receive the fullest lawful access.

Explore related guidance on the FOIA and public records hub.