What Changed in the Federal Database That Holds Your Boss's Hometown and Hobbies?

The Federal Energy Regulatory Commission keeps a file on every person who has ever worked there. That file now has new rules about who can see it and why.

The file exists because the law requires it

The Privacy Act of 1974 forces every federal agency to publish a notice whenever it creates or changes a system of records. FERC did exactly that on November 5, 2026. The system carries the label FERC-6. Its new name is simply Biographies. The old name was Biographical Material on FERC Commissioners and Key Staff Members. The change looks cosmetic. The contents are not.

What the system actually holds

The record for each current or former employee can contain full name, title, photograph, date of birth, place of birth, hometown, telephone number, email address. Marital status and family composition are also recorded. Hobbies and personal interests are included. Educational background and past work experience appear in the file. Awards and published materials are listed too. Military experience and honors round out the categories. All of it comes from the individual. No third-party sources are listed.

The new sharing rules explained

Twelve routine uses are brand new. One existing routine use was updated. Two of the new ones deal with data breaches. They let FERC share information with other agencies or entities when a breach is suspected or confirmed and there is a risk of harm to individuals, the Commission, the Federal Government, or national security. The other ten cover congressional inquiries, EEOC investigations, labor relations matters, litigation where the government is a party, Department of Justice representation, contractor access, National Archives inspections, Merit Systems Protection Board requests, law enforcement referrals, and dispute resolution. Routine use 13 now covers only Commission personnel who need the data to prepare introductions for speaking engagements and news releases announcing appointments.

How the data is stored and protected

Paper records sit in lockable file cabinets inside a lockable room. Entry to the room requires a badge. Electronic records live on a SharePoint site inside FERC's network. Every employee and contractor with access has passed a background investigation. Access is controlled by PIV cards or multi-factor authentication. Role-based permissions enforce least privilege. Retrieval works by employee name or title.

Retention is permanent

The schedule sits in the FERC Comprehensive Records Schedule, Part IV, Item 2 — COMMISSION PUBLICATIONS. Official record copies are classified as permanent. They will be transferred to the National Archives and Records Administration for long-term preservation. No exemptions are claimed for the system.

What happens next

Comments must arrive within 30 days of publication. If none arrive, the modified system becomes effective at least 30 days after publication. If comments arrive, FERC will review them and decide whether changes are needed. The contact for questions is Mittal Desai, who serves as Chief Information Officer and Senior Agency Official for Privacy, at privacy@ferc.gov or (202) 502-6432. The notice was signed November 2, 2026, by Debbie-Anne A. Reese, Secretary.

The sources this article was written from

  • "Federal Register, 91 FR 69832, November 5, 2026
    https://www.federalregister.gov/documents/2026/11/05/2026-22606/privacy-act-of-1974-systems-of-records"

Read next