And , I submit that the federal privacy law , governs the collection and use of personal data by federal agencies and which provides agencies a modicum of flexibility , is a reasonable point of departure for future discussions of either industry selfregulation or legislation .
I think the federal privacy law regulates how personal data is used by agencies to make hiring decisions .