Examples of these exceptions are:[3] The Privacy Act mandates that each United States Government agency have in place an administrative and physical security system to prevent the unauthorized release of personal records.

Former Attorney General Dick Thornburg appointed a Data Integrity Board but since then, the USDOJ has not published any Privacy Act reports.

Section 14 of Trump's "Enhancing Public Safety" executive order directs federal agencies to "ensure that their privacy policies exclude persons who are not United States citizens or lawful permanent residents from the protections of the Privacy Act regarding personally identifiable information" to the extent consistent with applicable law.

[11] Following the controversial Passenger Name Record (PNR) agreement signed with the European Union (EU) in 2007, the Bush administration provided an exemption for the Department of Homeland Security and the Arrival and Departure Information System (ADIS) from the U.S. Privacy Act.

[12] ADIS is intended to authorize people to travel only after PNR and API (Advance Passenger Information) data has been checked and cleared through a US agency watchlist.