Federal court rules OPM data disclosure to DOGE unlawful

What happened

A U.S. District Court in New York issued a summary judgment on October 20, 2026 finding that the Office of Personnel Management violated two provisions of the Privacy Act by disclosing millions of federal employee records to DOGE agents. The court held the broad access to systems containing personally identifiable information unlawful and will determine remedies later.

Why it matters for trust and compliance

• Its status is decided. The case has an outcome that others may cite.
• The ruling reinforces privacy protections under the Privacy Act by deeming unauthorized government data sharing illegal.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Confirm access, correction, deletion and opt-out requests are handled within the required time.
3. Map the security requirements to existing controls and close gaps.