Not to quibble, rick, but medical information is protected by HIPA, not the Privacy Act. Though if your SSAN (or other Privacy Act protected information) is on the medical documents, then they'd also be protected by the Privacy Act, too. But I agree with you that a FOIA request would not allow for release of medical (HIPA) information on an individual.