28 CFR 700.15 - Records in exempt systems of records.
(a) Law-enforcement records exempted under subsections (j)(2) and (k)(2). Before denying a request by an individual for access to a law-enforcement record that has been exempted from access pursuant to 5 U.S.C. 552a(k)(2), the Office must review the requested record to determine whether information in the record has been used or is being used to deny the individual any right, privilege, or benefit for which he would otherwise be eligible or to which he would otherwise be entitled under federal law. If so, the Office shall notify the requester of the existence of the record and disclose such information to the requester, except to the extent that the information would identify a confidential source. In cases when disclosure of information in a law-enforcement record could reasonably be expected to identify a confidential source, the record shall not be disclosed to the requester unless the Office is able to delete from such information all material that would identify the confidential source.
(b) Employee background investigations. When a requester requests access to a record pertaining to a background investigation and the record has been exempted from access pursuant to 5 U.S.C. 552a(k)(5), the record shall not be disclosed to the requester unless the Office is able to delete from such record all information that would identify a confidential source.