20 CFR 401.115 - Disclosure of personal information in program records without the consent of the subject of the record.
This section describes how various laws control the disclosure of personal information that we keep. We disclose information in the program records only when a legitimate need exists. For example, we disclose information to officers and employees of SSA who have a need for the record in the performance of their duties. We also must consider the laws identified below in the respective order when we disclose program information:
(b) If no law of this type applies in a given case, then we must look to FOIA principles. See § 401.130.