12 CFR 1070.51: Authority and responsibilities of the Chief Privacy Officer.

The Chief Privacy Officer is authorized to:

(a) Develop, implement, and maintain an organization-wide privacy program;

(b) Respond to requests for access to, accounting of, or amendment of records contained in a system of records maintained by the CFPB;

(c) Approve the publication of new systems of records and amend existing systems of record; and

(d) File any necessary reports related to the Privacy Act.