How to File a Privacy Act Request

Privacy Act Request

The Privacy Act allows U.S. citizens and lawfully admitted permanent resident aliens to request information on themselves, or provide written consent for others to access their Privacy Act records (e.g. attorneys, family members, congressional representatives, etc.). Under certain circumstances, the statute also permits individuals to seek records about other living persons.

In an effort to continually improve interaction with the public, the CIA is modernizing its process for intake and processing of access requests under the Privacy Act of 1974, 5 U.S.C § 552a, as amended, to include the establishment of a digital mechanism for completing, authenticating, and submitting request forms, in accordance with the Creating Advanced Streamlined Electronic Services for Constituents Act of 2019 ("CASES Act"). For additional information on the CASES Act, please see

Below you will find the available options for submitting a Privacy Act request: ** Privacy Act requests submitted directly via e-mail will not be accepted.

Option 1:

Use the secure Public Access Gateway to submit your Privacy Act request electronically by verifying your identity through the GSA service,

Option 2:

Use the Privacy Act Certification of Identity Form. You may submit an attachment listing additional information that may aid in locating responsive records. Mail this form to:

Central Intelligence Agency

Information and Privacy Coordinator

Washington, DC 20505

Option 3:

Following the format in Privacy Act Certification of Identity Form, submit a letter to the CIA specifying that you wish to receive a copy of records indexed to your name and include the following information:

- Your full name

- Address

- Date of birth

- Place of birth

- Citizenship status

If you are a naturalized US citizen or a Legal Permanent Resident (LPR), we require your naturalization or LPR number and the date that status was acquired.

- Please sign and date your request, and have it notarized or state, "I declare under penalty of perjury under the laws of the United States of America that the foregoing is true and correct, and that I am the person named above and requesting access to my records [, or records that I am entitled to request as the parent of a minor, or as the duly-appointed attorney-in-fact for the individual, or the legal guardian of the individual], and I understand that any falsification of this statement is punishable under the provisions of 18 U.S.C. § 1001 by a fine, imprisonment of not more than five years, or both, and that requesting or obtaining any record(s) under false pretenses is punishable under the provisions of 5 U.S.C. § 552a(i)(3) by a fine of not more than $5,000."

- Mail this letter to the address above.