which of the following is not a permitted disclosure of pii contained in a system of records

The option that is not a permitted disclosure of PII from a system of records is: “The record is disclosed for a new purpose that is not specified in the SORN.”

Core idea in plain language

Under the U.S. Privacy Act framework, PII in a system of records can only be disclosed according to specific legal conditions, such as the person’s consent or a published “routine use.” Disclosing that information for some brand‑new purpose that is not listed in the System of Records Notice (SORN) breaks those rules and is therefore not permitted.

Why the other options are permitted

• The individual has requested that their record be disclosed
  • Individuals generally may authorize disclosure of their own records; this is an expressly allowed condition of disclosure under the Privacy Act.

* So when the subject of the record asks for it to be shared, that is a permitted disclosure scenario.

• The record is disclosed for routine use
  • A routine use is a disclosure that is compatible with the purpose for which the information was collected and is formally published in the Federal Register as part of the SORN.

* When a disclosure fits one of these listed routine uses, it is treated as permitted even without the individual’s separate consent.

Because both of these conditions fall within standard Privacy Act disclosure rules, they are permitted, unlike a new, not‑listed purpose.

The wrong (impermissible) option

• “The record is disclosed for a new purpose that is not specified in the SORN.”
  • The SORN defines how and why records in that system may be used and disclosed, including all authorized routine uses.

* A _new_ purpose that is not in the SORN means the disclosure is outside the published conditions and therefore **not** a permitted disclosure of PII.

So, if you see this question on training or a test, the correct answer to
“Which of the following is not a permitted disclosure of PII contained in a system of records?”
is: “The record is disclosed for a new purpose that is not specified in the SORN.” ✅

TL;DR:
Permitted: individual requests disclosure; disclosure for published routine use.
Not permitted: disclosure for a new, not‑listed purpose outside the SORN.

Information gathered from public forums or data available on the internet and portrayed here.