The Privacy Act of 1974 (PA) is a federal law that requires agencies to give public notice of any record keeping systems that are used to keep information about people, which the agencies retrieve by the individual name or other personal identifier. The PA is found at 12 U.S.C. 552a.
As required by the E-Government Act of 2002, NCUA makes privacy impact assessments (PIAs) available to the public. A copy of this PIA which provides details about the collection and management of personally identifiable information for the purposes of issuing credentials, is available here.
Complete revisions of the NCUA's Privacy Act systems of Records are available here.