The Central Intelligence Agency (CIA) has announced the establishment of a new System of Records Notice (SORN), designated CIA-46, to formalize and centralize the handling of sensitive records pertaining to sexual harassment and sexual assault within its ranks. Published in the Federal Register, this notice, effective July 1, 2026, marks a significant step in the Agency's efforts to address and prevent such incidents, while also adhering to the strictures of the Privacy Act of 1974.
Origins of the SHARP Initiative
The creation of the CIA's Sexual Harassment/Assault Response and Prevention (SHARP) Office is rooted in specific federal mandates. Congress, through statutes codified at 50 U.S.C. 3531 to 3533, required the Agency to establish mechanisms for addressing sexual assault and harassment, including reporting, investigation, and the role of a Special Victim Investigator. The SHARP Office was consequently created to centralize these functions, providing a uniform approach to inquiries, allegations, and reports. Its mission extends beyond mere documentation, aiming to offer an enterprise service that balances education, trauma-informed care, and victim-centered advocacy. This structure is intended to ensure that employees have a dedicated and clear pathway to report incidents and receive support.
Framework for Reporting and Record Management
The CIA-46 SORN specifically covers records maintained by the SHARP Office, detailing the processes for assessing, processing, and tracking sexual harassment and sexual assault cases. A key distinction outlined in the system is between "Restricted" and "Unrestricted" reports. Restricted reports allow individuals to confidentially disclose incidents to SHARP without triggering an investigation or notification to management. This option prioritizes victim confidentiality and access to support services. In contrast, Unrestricted reports, while still handled confidentially, involve notifications to management and appropriate investigators, leading to more formal inquiries and actions. The SHARP Office is also responsible for broader functions including policy setting, training, and data analysis, which underpin the Agency's preventative and responsive strategies.
Expanded Routine Uses for Disclosure
Beyond the general routine uses previously established for the CIA, the new CIA-46 SORN introduces three specific additional routine uses for the disclosure of records. First, information may be shared with individual victims, alleged offenders, Senior Management Official Point of Contacts, witnesses, and security officers, including the Special Victim Investigator, to the extent necessary to respond to or update them on reports. This ensures relevant parties are informed as appropriate based on the nature of the report. Second, disclosures are permitted for "common perpetrator notification requirements." This provision allows the CIA to notify victims or other appropriate individuals when an allegation is made against someone known to have been the subject of prior sexual harassment or assault allegations. This mechanism aims to enhance safety and awareness within the Agency. Finally, records may be disclosed to federal, state, local, or Tribal law enforcement agencies or other entities when the Special Victim Investigator deems it necessary for inquiries or investigations related to Unrestricted reports. This highlights the potential for external legal action in more serious or substantiated cases.
The Special Victim Investigator
The role of the Special Victim Investigator (SVI) is critical within this new framework. As a statutorily-established federal law enforcement officer, the SVI is authorized to investigate or facilitate the investigation of Unrestricted reports. This position underscores the seriousness with which the Agency intends to approach these allegations, providing a dedicated and specialized investigative capability to ensure thorough and appropriate responses. The SVI's involvement is a cornerstone of the investigative process for Unrestricted reports, bridging internal processes with potential external law enforcement actions.
Privacy Act Compliance and Scope
The CIA's establishment of CIA-46 aligns with the Privacy Act of 1974, which mandates federal agencies to publish notices detailing their systems of records. This SORN clarifies that it does not alter the CIA's existing authorities or practices regarding the collection and maintenance of information about U.S. citizens and lawful permanent residents. Furthermore, it explicitly states that the SORN does not change an individual's rights to access or amend their records under the Privacy Act. The notice also indicates that these records can carry security classifications ranging from UNCLASSIFIED to TOP SECRET, reflecting the inherently sensitive environment in which the CIA operates. The SORN aims to provide a structured and legally compliant method for managing highly sensitive personal information within a national security context, balancing individual privacy rights with institutional accountability and operational necessity.
