Privacy Man: You get a phone call from one of your fraud investigators requesting Ms. Smith’s claim file. He wants to give it one of his law enforcement contacts at the local Police Department. You should know that the Privacy Act prohibits disclosing personal information outside the agency without written permission from Ms. Smith, unless an exception applies.
What should you do? To answer the scenario, open the Handbook for Safeguarding Sensitive PII at DHS and go to page 8, Minimize Proliferation of Sensitive PII.