United States. Sectoral privacy. Act

Computer Matching ActComputer Matching and Privacy Protection Act of 1988 (amending 5 U.S.C. § 552a)

In force

§1Summary

Synopsis

Amends the Privacy Act of 1974 to add protections for people whose records are used in automated matching programmes. Agencies must have written matching agreements (valid for 18 months by default) and Data Integrity Boards, and the subject may contest information before a federal benefit is denied, suspended or terminated.

Key themes
  • computer matching
  • matching agreements
  • Data Integrity Boards
  • due process before benefit denial
Unique features

Specific to federal agency data matching.

SaaS relevance

Limited; applies to federal agencies and their contractors.

§2Obligations

Breach notification
None
DPO
No
Cross-border transfers
None

§3Dates

Key dates
  • Adopted
  • In force
  • Pub. L. 100-503 signed 18 Oct 1988 (102 Stat. 2507). CRS reports it has been amended 10 times, most recently in 2014.

§4Text and authority

Text
Authority
Federal agencies' Data Integrity Boards; Office of Management and Budget

§5Where it applies

Domestic law of
United States
Also applies in

§6Sources and verification

Sources consulted
Verification

High confidence.

Enactment and effective-date text read in the Statutes at Large PDF on congress.gov (102 Stat. 2507); the 18-month agreement limit also appears there. In force date: section 10 of Pub. L. 100-503 says the amendments take effect 9 months after enactment (18 Oct 1988), except sections 3(b), 6, 7 and 8, which took effect on enactment; 9 months after is 18 Jul 1989 (calculated). Read in the Statutes at Large PDF on congress.gov.