Here is the US privacy act for individuals: https://www.justice.gov/opcl/privacy-act-1974

It contrasts with FOIA and public records acts, of course, so there is a wealth of rabbit holes to go down on exactly where lines get drawn, but saying "no such rights" is simply inaccurate. If you work with public institutions you get pulled in both directions.