The Justice Dept. alone, which includes the FBI, spent $19 million in fiscal 2005 to obtain commercially gathered names, addresses, phone numbers, and other data, according to the GAO. The Justice Dept. obeys the Privacy Act and "protects information that might personally identify an individual," a spokesman says. Despite the GAO's findings, a Homeland Security spokesman denies that his agency purchases consumer records from private companies. The State Dept. didn't respond to requests for comment.