14 CFR § 1212.203 - Disclosures.
(a) The system manager shall keep a disclosure accounting for each disclosure to a third party of a record from a system of records. This includes records disclosed pursuant to computer matching programs.
(b) Disclosure accountings are not required but are recommended for disclosures made:
(1) With the subject individual's consent; or
(2) In accordance with § 1212.203(f) (1) and (2), below.
(c) The disclosure accounting required by paragraph (a) of this section shall include:
(1) The date, nature, and purpose of the disclosure; and
(2) The name and address of the recipient person or Agency.
(d) The disclosure accounting shall be retained for at least 5 years after the disclosure or for the life of the record, whichever is longer.
(e) The disclosure accounting maintained under the requirements of this section is not itself a system of records.
(f) Records in a NASA system of records may not be disclosed to third parties without the consent of the subject individual. However, in consonance with 5 U.S.C. 552a(b), disclosure may be authorized without consent, if disclosure would be:
(1) To an officer or employee of NASA who has a need for the record in the performance of official duties;
(2) Required under the Freedom of Information Act (5 U.S.C. 552) and part 1206 of this chapter;
(3) For a routine use described in the system notice for the system of records;
(4) To the Bureau of the Census for purposes of planning or carrying out a census or survey or related activity pursuant to the provisions of Title 13, U.S. Code;
(5) To a recipient who has provided NASA with advance adequate written assurance that the record will be used solely as a statistical research or reporting record, and the record is to be transferred in a form that is not individually identifiable;
(6) To the National Archives and Records Administration as a record which has sufficient historical or other value to warrant its continued preservation by the United States Government or for evaluation by the Archivist of the United States or the Archivist's designee to determine whether the record has such value;
(7) To another agency or to an instrumentality of any governmental jurisdiction within or under the control of the United States for a civil or criminal law enforcement activity, if the activity is authorized by law and if the head of the agency or instrumentality has made a written request to NASA specifying the particular portion desired and the law enforcement activity for which the record is sought;
(8) To a person pursuant to a showing of compelling circumstances affecting the health or safety of an individual if upon such disclosure notification is transmitted to the last known address of such individual;
(9) To either House of Congress or, to the extent the matter is within its jurisdiction, any committee or subcommittee, or any joint committee of Congress or subcommittee of any such joint committee;
(10) To the Comptroller General, or any of the Comptroller's authorized representative(s), in the course of the performance of the duties of the General Accounting Office;
(11) Pursuant to the order of a court of competent jurisdiction; or
(12) To a consumer reporting agency in accordance with section 3711(f) of Title 31.