Blog
How To Protect Personal Information: USPS Privacy Law Explained
A practical privacy plan begins by identifying which information is exposed to the recipient, which information USPS must collect to provide a service, and which records may be disclosed under law. A PO Box can keep a residential address off ordinary correspondence, but it is not anonymous to USPS.
PO Boxes and address privacy
USPS requires an application and identity verification for PO Box service. The box address can be given to correspondents instead of a home address, but USPS still knows the customer identity. The service should therefore be described as address separation, not anonymity.
Records and disclosure
USPS privacy notices identify what data a service collects, why it is used, and the circumstances in which it may be disclosed. A customer can request access to applicable records about themself under the Privacy Act process.
Access to another person’s records is different: consent, a published routine use, a court order, or another legal authority may be required. Law-enforcement demands and ordinary customer-service access are not interchangeable.
Confidential address programs
Address Confidentiality Programs are generally created by states for eligible participants, often survivors of abuse, stalking, or similar threats. They are not one universal USPS promise. A reader should consult the program in the relevant state and follow its enrollment rules.
A practical search begins with the official website of the reader’s state attorney general, secretary of state, or designated victim-services agency and the phrase “Address Confidentiality Program.” Eligibility, application assistance, substitute-address use, and mail-forwarding procedures differ by state, so a commercial directory should not replace the administering agency’s current instructions.
State example: California Safe at Home
California’s Safe at Home application guidance is administered by the California Secretary of State, not by USPS. It provides eligible participants with a substitute mailing address and mail-forwarding service. Applicants must work with a designated enrolling agency; the program is not an anonymous PO Box available to every customer.
This example shows why the state matters. The administering agency, eligibility categories, application route, accepted mail, forwarding process, and rules for government use of the substitute address can differ elsewhere. Readers outside California should use their own state’s official program rather than copying California’s requirements.
Choose the route that fits the privacy goal
| Goal | Official starting point | Who can use it |
|---|---|---|
| Keep a home address off ordinary correspondence | USPS PO Box service, or California Safe at Home where eligible | PO Box applicants must meet USPS identity rules; Safe at Home requires qualifying circumstances and a designated enrolling agency |
| Access or correct your own USPS record | USPS Privacy Act resources | The record subject or an authorized representative, under the applicable system-of-records procedure |
| Request a general agency record | USPS FOIA resources | Any requester, subject to statutory exemptions and privacy limits |
| Report suspected mail theft | U.S. Postal Inspection Service reporting | A person with relevant facts or evidence; this is not a Privacy Act access request |
Tracking or signature services can document particular mailing or delivery events, but they do not make the mailpiece or its processing data invisible.
The table separates four different tasks. Another person’s protected record is not ordinarily available through customer service or a general FOIA request merely because the requester knows the address; consent or another legal basis may be required. Choose the route by whose information is involved and what outcome is needed.
Sources
Key facts were checked against USPS FOIA and Privacy Act resources; USPS Handbook AS-353 (January 2025); USPS PO Box standards and application rules; USPS privacy policy.