Privacy Act Statement of Disagreement: Filing, Effect, and Limits

A Statement of Disagreement under the Privacy Act of 1974 is a written objection you file when a federal agency refuses to correct a record about you, and it stays attached to that record for as long as the record exists. Every time the agency later shares the disputed information, it must include your statement so the next reader sees your side too. It does not erase or rewrite the underlying data. It makes sure no one reads the data in isolation.

Finish the Amendment Process First

You cannot start with a Statement of Disagreement. The Privacy Act sets a sequence, and skipping steps can cost you not just this remedy but your ability to sue later.

Step one is a written request to the agency asking it to amend the record you believe is inaccurate, irrelevant, untimely, or incomplete. The agency reviews the request and either corrects the record or denies you in writing.¹

Step two is an internal appeal of that denial. A higher-level official or review panel inside the agency handles it, following the agency’s own regulations. Only after the appeal is denied do you gain the right to file a Statement of Disagreement. Courts have treated this administrative exhaustion as jurisdictional, meaning a judge can dismiss a later lawsuit if you did not follow the full process.²

Writing the Statement

The statute requires the statement to be “concise” and to set forth your reasons for disagreeing with the refusal to amend.¹ Beyond that, each agency writes its own length and format rules by regulation. The Department of Justice, for example, limits statements to one typed page per disputed fact and requires you to clearly identify each part of the record you challenge.³ Other agencies impose similar limits. Going over gives the agency a clean procedural reason to reject the submission.

Reference the case or tracking number from the denied amendment request so the agency can tie your statement to the right file. Identify the specific system of records that holds the disputed information. Every federal agency publishes System of Records Notices in the Federal Register describing each system, who is covered, and how to request access.⁴ If you are not sure which system applies, the agency’s Privacy Act Officer can point you to it, and the Federal Register search tool lets you look up notices by agency.

Focus on what is wrong and why. A statement that reads “my evaluation omits three commendations documented in attachments A, B, and C” does more work than a page of complaint about how the agency handled you. The audience is every future reader of your file, not the official who denied your appeal.

How to Submit It

Send the statement to the agency component that maintains the disputed record. Most agencies designate a Privacy Act Officer or system manager as the contact, listed on the agency website or in the relevant System of Records Notice. Use a method that gives you proof of receipt: certified mail with return receipt, or a secure electronic portal if the agency provides one. Office of Personnel Management regulations require that the statement be maintained with the disputed record, so a delivery record protects you if the agency later says it never arrived.⁵

Some agencies require identity verification, which can mean a notarized statement or a signed certification. Check the agency’s Privacy Act regulations first. A missing verification step will delay processing.

What Happens Once the Agency Accepts It

The agency places your statement directly into the system of records alongside the disputed information. It must also notify any person or agency that previously received the disputed record, provided it kept an accounting of that disclosure, that a dispute notation now exists in the file.¹ The protective effect is not purely forward-looking. Prior recipients get told the information they already have is contested.

The agency may also draft its own statement of reasons explaining why it refused to amend. The statute frames this as discretionary, included “if the agency deems it appropriate,” but many agencies routinely prepare one.¹ When it does, both documents sit in the file together. Your reasons and the agency’s reasons. Neither gets the final word.

What the Statement Does for Every Future Disclosure

Any time the agency shares the disputed portion of your record after you file, it must clearly note the information is contested and provide a copy of your statement to whoever receives the record. It may include its own statement of reasons as well.¹ The rule covers every lawful sharing: transfers between federal departments, background investigations, security clearance reviews, and other permissible disclosures.

Your objection travels with the data. A hiring official, a security adjudicator, or a benefits reviewer does not see the disputed record alone. They see that you challenged it, why, and what the agency said back. Filing the statement does not guarantee they will side with you. It does prevent a decision based on information you believe is wrong, made by someone who never knew you objected.

The statement stays with the record as long as the record exists. Regulations require the agency to maintain it with the disputed record and to include a copy in any disclosure.⁵ You do not need to refile it or remind the agency it is there.

When You Cannot File One

Not every federal record system is subject to the amendment and disagreement provisions. Agency heads can exempt certain categories by publishing rules in the Federal Register.

General exemptions cover records maintained by the Central Intelligence Agency and records maintained by agencies whose primary function is criminal law enforcement, when those records involve criminal identification data, criminal investigation files, or enforcement records tied to a specific individual.¹

Specific exemptions reach further and commonly include:

Classified national security information.
Law enforcement investigatory material compiled outside the general criminal enforcement category above.
Secret Service protective services records.
Statistical records required by statute to be used only for statistical purposes.
Federal employment, military, contract, and security clearance suitability investigations, to the extent disclosure would reveal a confidential source.
Testing and promotion material for federal hiring or armed services evaluations, where disclosure would compromise the process.

If your record sits in an exempt system, the agency can lawfully refuse both amendment and a Statement of Disagreement. Review the agency’s published Federal Register exemption notices or ask its Privacy Act Officer to confirm.

When a Statement Is Not Enough

The Privacy Act also lets you sue in federal district court to force the amendment itself. You can file where you live, where the records are located, or in the District of Columbia. The court reviews the dispute de novo, meaning the judge does not defer to the agency’s earlier decision, and can order the agency to correct the record if it agrees with you.¹ That is a stronger remedy than a Statement of Disagreement, which leaves the original data in place. Litigation is slow and expensive, so many people file the statement as a practical alternative or as a stopgap while deciding whether to sue.

You have two years from the date the cause of action arises, generally the final denial, to file. If the agency materially and willfully misrepresented information it was required to disclose, the clock runs from the date you discover the misrepresentation.¹

If the Agency Shares Your Record Without Your Statement

An agency that discloses the disputed record without including your statement, or otherwise fails to meet Privacy Act requirements, exposes itself to a damages suit. When a court finds the agency acted intentionally or willfully, you can recover actual damages with a floor of $1,000, plus reasonable attorney fees and costs.¹

The “intentional or willful” threshold does the real work here. A careless mistake by a records clerk, on its own, may not clear it. You have to show the agency acted with knowledge or reckless disregard of its obligations, and that you suffered actual harm.⁶ The $1,000 minimum is a floor for plaintiffs who clear every hurdle, not a guaranteed payout for any misstep. If you are considering a damages claim, talk to an attorney before filing.

1
Office of the Law Revision Counsel. 5 USC 552a – Records Maintained on Individuals
2
U.S. Department of Justice. Overview of the Privacy Act of 1974 2020 Edition – Remedies
3
eCFR. 28 CFR 16.46 – Privacy Act Requests for Amendment or Correction
4
Social Security Administration. Privacy Act Systems of Records Notices
5
eCFR. 5 CFR 297.307 – Statement of Disagreement
6
U.S. Department of Justice. Overview of the Privacy Act of 1974 – Civil Remedies