A federal lawsuit filed on Tuesday accuses Elon Musk and the Department of Government Efficiency (DOGE) agency he runs of allegedly accessing highly sensitive personnel data without proper vetting or authorization. The lawsuit, filed in the Southern District of New York, represents 104 current and former federal workers, along with various unions representing government workers.

The plaintiffs are seeking an injunction to cut off DOGE's access to the Office of Personnel Management's (OPM) computer systems, which contain sensitive personnel records. According to the lawsuit, DOGE's agents, many of whom are under the age of 25 and were previously employees of Musk's private companies, were given "administrative" access to OPM's systems without undergoing rigorous national-security vetting.

The lawsuit alleges that DOGE's access to OPM records violated the Privacy Act, which prohibits improper access to personal data, including across federal agencies. The complaint argues that the Privacy Act makes it unlawful for OPM to hand over access to its millions of personnel records to DOGE, which lacks a lawful and legitimate need for such access.

The lawsuit also raises concerns about the potential consequences of DOGE's access to federal worker data. It notes that disclosure of financial data could expose workers to hacking by criminals and foreign actors, and that Musk and President Trump have threatened to fire employees viewed as disloyal, which could lead to harmful professional consequences for the workers.

The lawsuit cites the example of 19-year-old DOGE worker Edward Coristine, who reportedly went by "Big Balls" online and was fired from a cybersecurity firm after an internal probe into data leaks during his employment. This raises questions about the qualifications and trustworthiness of DOGE's agents, who were given access to sensitive personnel data.

The lawsuit comes amid growing controversy over DOGE's access to sensitive government data as the agency begins instituting mass layoffs and other reforms across the federal government. According to Victoria Noble, a lawyer for the Electronic Frontier Foundation, this lawsuit is just "phase one" before a class action lawsuit.

DOGE, Musk, and OPM did not immediately respond to requests for comment. The outcome of this lawsuit could have significant implications for the government's handling of sensitive personnel data and the role of private companies in accessing and managing that data.

The lawsuit highlights the importance of ensuring that access to sensitive data is strictly controlled and that those with access are properly vetted and authorized. It also raises questions about the accountability of private companies and government agencies when it comes to protecting sensitive data.

As the lawsuit moves forward, it will be important to monitor its progress and any potential implications for the government's handling of sensitive data. The outcome could have far-reaching consequences for the protection of personnel data and the role of private companies in accessing and managing that data.