The Privacy Act exempts certain information in whole or in part from its search and disclosure provisions (see Full Text of PA [1], CIA Information Act of 1984 [2],):
Because the CIA processes Privacy Act requests under both the Privacy Act [3] and the Freedom of Information Act (FOIA) [4], some information may also be exempt [5] from release under the FOIA statute. For example, FOIA Exemption (b)(6) is commonly applied to information found in Privacy Act records concerning other individuals that may not be released without their written consent.
Links
[1] https://www.cia.gov/readingroom/privacy-act-1974-5-usc-%25C2%25A7552a-amended
[2] https://www.cia.gov/readingroom/cia-information-act-1984
[3] https://www.cia.gov/readingroom/privacy-act-1974-5-usc-%C2%A7552a-amended
[4] https://www.cia.gov/readingroom/freedom-information-act-5-usc-%25C2%25A7552
[5] https://www.cia.gov/readingroom/exemptions-foia-0