What is a Privacy Act Request?

The Privacy Act Request allows individuals to gain access to their own personal records subject to certain exemptions, and to seek correction or amendment of records maintained by VA that are inaccurate, incomplete, untimely, or irrelevant.

The Privacy Act pertains only to information that is maintained in a “system of records,” which is defined as a group of agency-controlled records from which information is retrieved by a unique identifier, such as an individual’s name or employee identification number. The Privacy Act further defines a “record” as any individually identifiable set of information that an agency might maintain about a person. For example, a record that may be sought by an individual includes employment records.

Seeking non-public VA records about you or your dependent? Find out how to Submit a Privacy Act Request below.

Seeking non-public VA records? Make a FOIA Request.

How to Submit a Privacy Act Request?

Refer to the appropriate VA Administration Office below that is specific to your Privacy Act Request.

Veterans Benefits Administration (VBA) Privacy Act Requests

Record Access

Privacy Act requests for notification or access to VBA Privacy Act records, such as compensation and pension records, must be submitted by the individual by mail or electronically with their signed request and identifying information such as full name, date of birth, and place of birth to the Centralized Support Division.

There are two options to submit a Privacy Act request, either:

  • Privacy Act requests can be made by completing the entire VA Form 20-10206, Freedom of Information Act or Privacy Act
  • Or by submitting a written request to the Centralized Support Division, including the individual’s Social Security number or C-File number may aid in the identification of records.

Note: When submitting a request by email, the signed request must be included as an email attachment and include the wet signature.

Centralized Support Division mailing address and email:
Department of Veterans Affairs
Evidence Intake Center
P.O. Box 4444
Janesville, WI 53547-4444
FOIA.vbarmc@va.gov.

Any individuals who have questions about access to records may also call 1-800-827-1000. Information about how to contact Fiduciary services can be found on their contact page.

Record Amendments

To amend an individual’s record (to include Vocational Rehabilitation & Employment, Insurance, Loan Guaranty or Education Service), an amendment request must be submitted to the FOIA/Privacy Act Officer at the VA Regional Office serving the individual’s jurisdiction.

Address locations for the nearest VA Regional Office are listed at VA Locations Link.

Veterans Health Administration (VHA) Privacy Act Requests

Record Access

Privacy Act requests for access of VHA medical records must be submitted by the individual in person, by mail or fax with their signed request and identification information, such as full name and date of birth, to the VHA Privacy Officer at the VA medical facility where the individual received care.

If the VHA facility accepts requests through My HealtheVet, the request for an individual’s own records may be submitted in a Secure Message with the Veteran’s name typed within the message.

  • VA Form 10-5345a may be used by the individual to submit a written request for their own medical records.
  • VA Form 10-5345 may be used for the individual to request their health information be disclosed to another party.

Record Amendments

Privacy Act requests for correction to or amendment of VHA medical records must be brought to the attention of the VHA Privacy Officer at the VA medical facility where the individual received care. Contact information for VA medical facilities can be found at the Find VA Locations Tool.

National Cemetery Administration (NCA) Privacy Act Requests

The Privacy Act of 1974 does not apply to deceased individuals. Requests for notification, access to, or correction or amendment of NCA records may be submitted by individuals with legal standing on behalf of the deceased individual.

If a Federal, state, local, or tribal law authorizes a person to act on behalf of a deceased individual, or the deceased individual’s estate (e.g., as executor), that person is considered a personal representative of the deceased.

Record Access

Any individual who wishes to access information to determine whether a record is being maintained by the National Cemetery Administration under their name or other personal identifier or wants to determine the content of such records should submit a written request by mail or email to

Department of Veterans Affairs
National Cemetery Administration Privacy Officer
810 Vermont Avenue, NW
Washington, DC 20420
CEMNCAPrivacy@va.gov

All inquiries must reasonably identify the type of records involved. Inquiries should include the individual’s full name, branch of service, dates of service, service numbers, social security number, and date of birth.

Record Amendments

Individuals seeking to contest or amend records pertaining to them should submit a written request by mail or email to:

Department of Veterans Affairs
National Cemetery Administration Privacy Officer
810 Vermont Avenue, NW
Washington, DC 20420
CEMNCAPrivacy@va.gov

A request to contest or amend records must state clearly and concisely what record is being contested, the reasons for contesting it, and the proposed amendment to the record.

What if Your Privacy Act Amendment Request is Denied?

If your request for amendment is denied, you will be notified of this decision in writing, which will contain information about your right to appeal the decision.

Privacy Act Exemptions

The Privacy Act of 1974 (5 U.S.C. § 552a) provides that agencies will provide access to records on individuals within its possession unless one of 10 exemptions apply. The exact language of the exemptions can be found in the Privacy Act of 1974 (5 U.S.C. § 552a),
https://www.justice.gov/opcl/ten-exemptions. VA regulations at 38 CFR § 1.582 – Exemptions provide a complete listing of all VA exempt Privacy Act Systems of Records.