The Privacy Act prohibits the disclosure of personal information without consent, except under 12 statutory exceptions, and provides individuals rights to access and amend their records. It identifies 12 principles related to collecting, storing, accessing, correcting, and limiting use and disclosure of personal information and protected health information. These principles govern the purpose and source of information collection, manner of collection, storage, security, accuracy, retention period, use, identifiers, and disclosure of personal information.