the agency to fully apply Privacy Act requirements of
notice, access, and correction to the new traveler redress program
and the underlying watch list system. Instead of following the
Privacy Act, the agency is asking the public to rely on its
"internal quality assurance procedures." EPIC explained that these
procedures aren't working and cited a government report (pdf) that
found significant problems with the handling of personal information
and violations of privacy laws by DHS.