One of the areas in the Privacy Act that I would hope to see changed in future modernization of the act is that I do not currently have the ability to make orders, binding legal orders vis-à-vis a department of the government. I would make recommendations, and I would identify if there are shortcomings. That's what my report would do, assuming that there is a violation.
On May 9th, 2024. See this statement in context.