DEPARTMENT OF DEFENSE PRIVACY PROGRAM

This Regulation is reissuedunder the authority of DoD Directive 5400.11, “DoD Privacy
Program,” May 8, 2007 (Reference (a)). It provides guidance on section 552a of title 5 United
States Code (U.S.C.), the Privacy Act of 1974, as amended, (Reference (b)), and prescribes uniform
procedures for implementation of the DoD Privacy Program.
DoD 5400.11-R, “Department of Defense Privacy Program,” August 13, 1983, is hereby canceled.
This Regulation applies to the Office of the Secretary of Defense, the Military Departments, the
Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Inspector General of the
Department of Defense, the Defense Agencies, the DoD Field Activities, and all other
organizational entities within the Department ofDefense (hereafter referred to as the “DoD
Components”).
The provisions of this Regulation shall be applicable by contract or other legally binding action to
U.S. Government contractors whenever a DoD contract requires the performance of any activities
associated with maintaining a system of records,including the collection, use, and dissemination of
records on behalf of the contracting DoD Component. When maintaining a system of records or a
portion of a system of records, contractors and their employees shall be considered employees of
the contracting DoD Component for purposes ofthe criminal penalties of the Act.