This regulation sets forth policies and procedures that govern personal information kept by the Department of the Army in systems of records. Army policy is as follows: Protect the privacy of individuals from unwarranted intrusion. Collect only the personal information about an individual that is legally authorized and necessary to support Army operations. Disclose this information only as authorized by the Privacy Act and this regulation. Keep only personal information that is timely, accurate, complete, and relevant to the purpose for which it was collected. Safeguard personal information to prevent unauthorized use, access, disclosure, alteration, or destruction. Permit individuals to amend records about themselves contained in Army systems of records which are factually in error. Act on all requests promptly, accurately, and fairly.