Federal Court Rules OPM Violated Privacy Act
The ruling concludes that the agency improperly shared millions of federal employee records with DOGE agents.
Updated on Oct. 20, 2026 in Cybersecurity
Live Poll
Do you trust the federal government to keep your personal employment records secure?
A federal court has determined that the Office of Personnel Management violated the Privacy Act by disclosing personal records of millions of federal employees to DOGE agents. The unauthorized access to sensitive systems began in early 2025.
Why it matters
The decision underscores the legal requirements for federal agencies to protect sensitive personnel information under the 1974 Privacy Act. The court must still determine the specific legal remedy for the violation.
The Office of Personnel Management granted broad system access to DOGE agents beginning in January 2025. The agency has since rescinded this database access.
The players
Office of Personnel Management
This is the independent federal agency that manages the civil service of the United States government.
DOGE
This refers to the Department of Government Efficiency, which operated with agents who were granted access to federal systems.
The details
The Southern District of New York issued the ruling after finding that the agency failed to protect personally identifiable information held in government systems. While DOGE agents have since left the government, the court is currently weighing appropriate remedies for the data exposure.
Timeline
January 2025: OPM began disclosing federal employee records to DOGE agents.
October 20, 2026: A federal court issued the summary judgment ruling against OPM.
The Tech Race
This ruling highlights the ongoing tension between government data sharing and the strict mandates of the 1974 Privacy Act. It signals a shift toward heightened judicial scrutiny of how federal agencies manage and grant access to digital personnel records.
The court's decision affirms that millions of federal employees are protected by long-standing statutes regarding their personal data. The ruling reinforces privacy expectations for those employed by the U.S. government.
The takeaway
The court ruling highlights the necessity of strictly adhering to data protection laws when integrating new units into federal systems. Agencies must balance administrative efficiency with the enduring legal mandates of the Privacy Act.
Further reading
For more on the protection of digital government assets, see Cybersecurity.
Live Poll
Do you trust the federal government to keep your personal employment records secure?
