(5) in order to protect the privacy of individuals identified
in information systems maintained by Federal agencies, it is
necessary and proper for the Congress to regulate the collection,
maintenance, use, and dissemination of information by such
agencies.
'(b) The purpose of this Act (enacting this section and
provisions set out as notes under this section) is to provide
certain safeguards for an individual against an invasion of
personal privacy by requiring Federal agencies, except as otherwise
provided by law, to -
'(1) permit an individual to determine what records pertaining
to him are collected, maintained, used, or disseminated by such
agencies;
'(2) permit an individual to prevent records pertaining to him
obtained by such agencies for a particular purpose from being
used or made available for another purpose without his consent;
'(3) permit an individual to gain access to information
pertaining to him in Federal agency records, to have a copy made
of all or any portion thereof, and to correct or amend such
records;
'(4) collect, maintain, use, or disseminate any record of
identifiable personal information in a manner that assures that
such action is for a necessary and lawful purpose, that the
information is current and accurate for its intended use, and
that adequate safeguards are provided to prevent misuse of such
information;
'(5) permit exemptions from the requirements with respect to
records provided in this Act only in those cases where there is
an important public policy need for such exemption as has been
determined by specific statutory authority; and
'(6) be subject to civil suit for any damages which occur as a
result of willful or intentional action which violates any
individual's rights under this Act.'