And, I submit that the federal privacy law, governs the collection and use of personal data by federal agencies and which provides agencies a modicum of flexibility, is a reasonable point of departure for future discussions of either industry selfregulation or legislation.
The federal privacy law does not regulate how personal data is used by agencies.