Summary:
An agency that collects personal information, including electronically, must maintain the source(s) in accessible form that can be provided to the data subject; unless 1) the source is the data subject, or 2) he or she has received a copy of the source document, or 3) the data subject that has requested that the electronic information be discarded.