12 CFR 792.55 - Times, places, and requirements for identification of individuals making requests and identification of records requested.
(1) Individuals appearing in person, if not personally known to the system manager responding to the request, must present a single document bearing a photograph (such as a passport or identification badge) or two items of identification which do not bear a photograph but do bear both a name and address (such as a driver's license or voter registration card);
(2) Individuals submitting requests by mail or written electronic form, such as facsimile or e-mail, may establish identity by a signature, address, date of birth, employee identification number if any, and one other identifier such as a photocopy of driver's license or other document. If inadequate identifying information is provided, the system manager responding to the request may require further identifying information before any notification or responsive disclosure.
(3) Individuals appearing in person or submitting requests by mail or written electronic form, who cannot provide the required documentation or identification, may provide an unsworn declaration subscribed to as true under penalty of perjury.
(b) The parent or guardian of a minor or a person judicially determined to be incompetent shall, in addition to establishing identity of the minor or other person as required in paragraph (a) of this section, furnish a copy of a birth certificate showing parentage or a court order establishing guardianship.
(c) A record may be disclosed to a representative of an individual to whom the record pertains provided the system manager receives written authorization from the individual who is the subject of the record.
(d) An individual seeking to review records about that individual may be accompanied by another person of their own choosing. In such cases, the individual seeking access shall be required to furnish a written statement authorizing discussion of that individual's records in the accompanying person's presence.
(e) In addition to the requirements set forth in paragraphs (a), (b) and (c) of this section, the published “Notice of System of Records” for individual systems may include further requirements of identification where necessary to retrieve the individual records from the system.