(a) Each NASA employee is responsible for adhering to the requirements of the Privacy Act and this regulation.

(b) An employee shall not seek or obtain access to a record in a NASA system of records or to copies of any portion of such records under false pretenses. Only those employees with an official “need to know” may seek and obtain access to records pertaining to others.

(c) Employees shall refrain from discussing or disclosing personal information about others which they have obtained because of their official need to know such information in the performance of official duties.

(d) To the extent included in a contract which provides for the maintenance by or on behalf of NASA of a system of records to accomplish a function of NASA, the requirements of this section shall apply to contractor employees who work under the contract.