The Privacy Act (PA) permits an individual to request an amendment of a record that is not complete, accurate, timely, or relevant (see Full Text of PA [1] and Code of Federal Regulations, Central Intelligence Agency, 32 CFR [2]). Thus you are given a chance to correct errors and to prevent incorrect information from being disseminated.
If you believe your records contain incorrect information, you can request an amendment by writing to:
Information and Privacy Coordinator
Central Intelligence Agency,
Washington, D.C. 20505
Your letter must include :
Administrative Appeal of Agency Decisions The CIA will acknowledge and rule on your amendment. If the Agency agrees to your amendment, it will notify you in writing of the correction and also any person or agency to which the information was officially disseminated. If the CIA refuses your amendment, in whole or in part, it must advise you in writing of its decision, the reasons for the denial, and inform you of your right to appeal to a higher decision making level within the Agency. The PA permits requesters disagreeing with an Agency decision to file an administrative appeal to the Agency Release Panel (ARP) in care of the Coordinator (the address can be found in "sample letter" [3]) within 45 days of the Agency's initial decision. The ARP members consist of senior Agency officials, and one of them--usually the member(s) with subject matter interest -- will handle your appeal request and bring it before the entire Panel for a final review. No particular form of appeal is required; however, your letter should:
The CIA will notify you of your right of judicial review if your amendment is denied on administrative appeal. If still dissatisfied with the Agency's decision, the requester may seek a review of the Agency's determinations in a US District Court but must file that request with the court within two years from the date of the Agency's appeal denial. However, because the CIA and many other agencies process Privacy Act requests also under the Freedom of Information Act (FOIA), the FOIA's general six-year statute of limitations probably applies, but there have been no court tests of the conflicting provisions of these two acts. In court, Agency representatives must present their case for not amending your record.
Links
[1] https://www.cia.gov/readingroom/privacy-act-1974-5-usc-%25C2%25A7552a-amended
[2] https://www.cia.gov/readingroom/32-cfr
[3] https://www.cia.gov/readingroom/privacy_request