The Social Security Administration has introduced a new electronic agency form for individuals seeking access to records protected under the Privacy Act, according to program policy instructions updated on September 29, 2026.
Emergency Message EM-26036 announces the new Electronic Agency Form SSA-2288-OP1, Request for Individual Access to Records Protected Under the Privacy Act. The instructions apply to all programs and to all DSs, ADs, FOs, TSCs, PSCs and CP.
The change responds to the Creating Advanced Streamlined Electronic Services for Constituents Act of 2019 (CASES Act) and Office of Management and Budget Memorandum M-21-04, Modernizing Access to and Consent for Disclosure of Records Subject to the Privacy Act.
Those measures mandate that federal agencies modernize the processes by which individuals may request access to records protected under the Privacy Act. The CASES Act and OMB M-21-04 require SSA to digitally accept access request forms from individuals who have been remotely identity proofed and authenticated.