# 22 CFR § 1101.5: Security, confidentiality and protection of records > Federal · Regulations · In force URL: https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.5 ## Section - **Citation:** 22 CFR § 1101.5 - **Heading:** Security, confidentiality and protection of records - **Jurisdiction:** Federal - **Kind:** Regulations - **Status:** In force - **Text as of:** September 22, 2026 - **Source:** Publisher's official text - **Location:** Title 22—Foreign Relations > CHAPTER XI—INTERNATIONAL BOUNDARY AND WATER COMMISSION, UNITED STATES AND MEXICO, UNITED STATES SECTION > PART 1101—PRIVACY ACT OF 1974 ## Text (a) The Act requires that records subject to the Act be maintained with appropriate administrative, technical and physical safeguards to ensure the security and confidentiality of records and to protect against any anticipated threats or hazards to their security or integrity which could result in substantial harm, embarrassment, inconvenience or unfairness to any individual on whom information is maintained. (b) When maintained in manual form (typed, printed, handwritten, etc.) records shall be maintained, at a minimum, subject to the following safeguards, or safeguards affording comparable protection: (1) Areas in which the records are maintained or regularly used shall be posted with an appropriate warning stating that access to the records is limited to authorized persons. The warning shall also summarize the requirements of § 1101.3 and state that the Act contains a criminal penalty for the unauthorized dislosure of records to which it applies. (2) During working hours: (i) The area in which the records are maintained or regularly used shall be occupied by authorized personnel or (ii) access to the records shall be restricted by their storage in locked metal file cabinets or a locked room. (3) During non-working hours, access to the records shall be restricted by their storage in locked metal file cabinets or a locked room. (4) Where a locked room is the method of security provided for a system, that security shall be supplemented by: (i) Providing lockable file cabinets or containers for the records or (ii) changing the lock or locks for the room so that they may not be opened with a master key. For purposes of this paragraph, a master key is a key which may be used to open rooms other than the room containing records subject to the Act, unless those rooms are utilized by officials or employees authorized to have access to the records subject to the Act. (5) Personnel handling personal information during routine use will ensure that the information is properly controlled to prevent unintentional or unauthorized disclosure. Such information will be used, held, or stored only where facilities or conditions are adequate to prevent unauthorized or unintentional disclosure. (c) When the records subject to the Act are maintained in computerized form, safeguards shall be utilized based on those recommended in the National Bureau of Standard's booklet “Computer Security Guidelines for Implementing the Privacy Act of 1974” (May 30, 1975), and any supplements thereto, which are adequate and appropriate to assuring the integrity of the records. ## Nearby sections - [22 CFR § 1100.1 § 1100.1 Cross-references to employee ethical conduct standards, financial disclosure and financial interests regulations and other conduct rules.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1100.1.md) - [22 CFR § 1101.1 § 1101.1 Purpose and scope.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.1.md) - [22 CFR § 1101.2 § 1101.2 Definitions.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.2.md) - [22 CFR § 1101.3 § 1101.3 General policy: Collection and use of personal information.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.3.md) - [22 CFR § 1101.4 § 1101.4 Reports on new systems of records; computer matching programs.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.4.md) - [22 CFR § 1101.5 § 1101.5 Security, confidentiality and protection of records.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.5.md) - [22 CFR § 1101.6 § 1101.6 Requests for access to records.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.6.md) - [22 CFR § 1101.7 § 1101.7 Disclosure of records to individuals who are subjects of those records.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.7.md) - [22 CFR § 1101.8 § 1101.8 Disclosure of records to third-parties.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.8.md) - [22 CFR § 1101.9 § 1101.9 Exemptions.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.9.md) - [22 CFR § 1101.10 § 1101.10 Accounting for disclosures.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.10.md) - [22 CFR § 1101.11 § 1101.11 Fees.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.11.md) - [22 CFR § 1101.12 § 1101.12 Request to correct or amend a record.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.12.md) - [22 CFR § 1101.13 § 1101.13 Agency review of request to correct or amend a record.](https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.13.md) --- Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/ecfr-22-1101.5. Check the current official text before relying on it. Not legal advice.