With the rise of the internet and computer storage, the loss and theft of individuals’ private information has become commonplace. Data breaches occur with increasing regularity, leading some to question if the current statutory and regulatory schemes properly incentivize the maintenance of adequate security measures amongst federal agencies. This Note argues that inadequate data security practices by government agencies implicate the constitutional right to informational privacy. While the Court has previously upheld intrusive personal information collection programs, the Privacy Act, which plays an essential role in the Court’s decisions, has been weakened significantly by recent interpretation of its damages provision. Given this change in the effectiveness of the statutory protection of private data, lawsuits alleging a violation of the constitutional right to informational privacy might succeed and could help incentivize optimal levels of data security amongst government agencies.