DOT rules and regulations implementing the Privacy Act of 1974 are located at 49 CFR part 10.
48 C.F.R. § 1224.103