Implementation of the Routine Use Clause of the Privacy Act

Information privacy, the privacy of personally identifiable data held by organizations, gained access to the federal policy agenda in the sixties. The passage of several legislative acts resulted in protection for information privacy in specific environments and circumstances. In 1974, the Privacy Act was passed, providing citizens limited protection for data held by agencies of the federal government. While the Privacy Act is the cornerstone of protection for citizens with regard to government-held data, the law has been less effective than its designers hoped it would be. One major deject of the law is the routine use clause, which has been subjected to broad interpretation and distortion, to the benefit of executive branch agencies which handle personally identifiable data. This article examines the issue of information privacy, with focus on the misuse of the routine use clause and subsequent implications for citizen privacy.