21 C.F.R. § 1401.20
This subpart implements the Privacy Act, 5 U.S.C. 552a , a Federal law that requires Federal agencies to protect private information about individuals that the agencies collect or maintain. It establishes ONDCP's rules for access to records in systems of records we maintain that are retrieved by an individual's name or another personal identifier. It describes the procedures by which individuals may request access to records, request amendment or correction of those records, and request an accounting of disclosures of those records by ONDCP. Whenever it is appropriate to do so, ONDCP automatically processes a Privacy Act request for access to records under both the Privacy Act and the FOIA, following the rules contained in this part. ONDCP processes a request under both the Privacy Act and the FOIA so you will receive the maximum amount of information available to you by law.
21 C.F.R. § 1401.20