§ 317.80 - Statutory training requirements.

(a) Establishing rules of conduct. Under subsection (e)(9) of the Privacy Act, the agency is required to establish rules of conduct for persons involved in the design, development, operation, or maintenance of any system of records, or in maintaining any record.

(b) Training. The agency shall train all personnel involved in the functions described in the preceding paragraph. The training shall include instruction in the rules of conduct and all requirements prescribed by the Privacy Act, including the penalties for noncompliance.