Re: Privacy Act March 26, 2012 at 11:33 am EDT #2854 JGo9Participant There is not a regulatory requirement to have them in your files. Having them in your files is not a bad idea, but not necessary in my opinion if you have it in your policy.