Q: Can an individual sue OPM for letting her personnel information get hacked? A: Yes. A suit could be brought alleging a violation of the Privacy Act of 1974 by OPM for failing to protect information contained in a system of records.  Specifically, an agency is prohibited from disclosing “any record which is contained in a system of records by any means of communication to a person.  .  .  except pursuant to written request by, or with the written consent of, the individual to whom the record pertains,”  subject to exceptions which are not applicable in this case.  See, 5 U.S.C.…