DOC rules implementing the Privacy Act of 1974 are described in 15 CFR Part 4.
Subpart 1324.2_Freedom of Information Act