It was really just to understand when the breach occurs. From what I've heard, in fact, it is a narrow view to what degree that personal information can be shared. So there could in fact be a breach of the Privacy Act, even if the information were shared for purposes not associated with the request that came forward.
On October 2nd, 2006. See this statement in context.