Q: Can an individual sue OPM for letting her personnel information get hacked? A: Yes. A suit could be brought alleging a violation of the Privacy Act of 1974 by OPM for failing to protect information contained in a system of records. Specifically, an agency is prohibited from disclosing “any record which is contained in a system of records by any means of communication to a person. . . except pursuant to written request by, or with the written consent of, the individual to whom the record pertains,” subject to exceptions which are not applicable in this case. See, 5 U.S.C.…