(a) Systems of records to which the Privacy Act applies shall not be released except by the Government regardless of whether the Government or a contractor acting on behalf of the Government is maintaining the records. Examples of systems of records are:
(1) Personnel, payroll and background records personal to any officer or employee of DOT, or other person, including his or her residential address;
(2) Medical histories and medical records concerning individuals, including applications for licenses; and
(3) Any other detailed record containing information identifiable with a particular person.
(b) Examples of systems of records to which the Privacy Act does not apply are:
(1) Records that are maintained by a contractor on individuals employed by the contractor in the process of providing goods and services to the Federal government; and
(2) Records generated on contract students pursuant to their attendance (e.g., admission forms, grade reports) when contracting with an educational institution. These records must be similar to those maintained on other students, must not reveal their identities, and must not be commingled with records of other students.