A proper Privacy Act request is one in which you are requesting records on yourself that are contained in files retrievable by your name or another personal identifier. Your request should include as much detail as possible to identify the specific information you are requesting. To assist you in determining the kinds of records that the NRO keeps, please refer to the list of Systems of Records Notices.
All Privacy Act requests must be submitted in writing, and must include your signature. A digital signature is required for on-line submissions. Privacy Act requests without a digital signature will not be processed.
Adobe provides information on digital signatures found at the following link: http://www.adobe.com/security/digsig.html
Your request should include the following information. Failure to include this information may result in processing delays or make it impossible for us to process your request.
Notarize your letter or sign it under penalty of perjury pursuant to 28 U.S.C. 1746 (Example: I declare under penalty of perjury pursuant to 28 U.S.C. 1746, that the foregoing is true and correct.) to ensure that records concerning you are only released to you, or if requesting through an attorney, an original notarized statement or statement signed under penalty of perjury (pursuant to 28 U.S.C. 1746) authorizing us to release information to your attorney.
Mail your letter to:
National Reconnaissance Office
Information Review and Release Group
14675 Lee Road
Chantilly, VA 20151-1715
Fax your letter to 703-227-9198;
Processing Time - Requests vary in their scope and complexity. For that reason, it is difficult to provide an "average" processing time. Actual processing time will depend upon how extensive a search is required; the complexity, volume and sensitivity of the records located; the need for consultation among various offices within NRO, as well as the need to consult with other agencies having an interest in the material; and the number of cases preceding a request in the processing queue. Requests are processed on a "first-in, first-out" basis, based on the origination date of the request.