(a) The Federal Register. There are three types of documents relating to the Privacy Act Program that must be published in the Federal Register. They are the DA Privacy Program policy and procedures (AR 340-21), the DA exemption rules, and Privacy Act system of records notices.
(b) Rulemaking procedures. (1) DA Privacy Program procedures and exemption rules are subject to the formal rulemaking process.
(1) DA Privacy Program procedures and exemption rules are subject to the formal rulemaking process.
(2) Privacy Act system of records notices are not subject to formal rulemaking and are published in the Federal Register as Notices, not Rules.
(3) The Privacy Program procedures and exemption rules are incorporated into the Code of Federal Regulations (CFR). Privacy Act system of records notices are not published in the CFR.