As someone who has been the subject of some ATI requests, absolutely. There are appropriate limits within ATI on that, but at the same time, even in those instances, the obligation falls to the individual to show that the information is subject to an exemption, or that the Privacy Act applies.
The paramount perspective is one of openness, transparency, and accountability within government. That's the right approach, and it's why I'm a big supporter of ATI and the CAIRS database.