36 CFR 902.56 - Protection of personal privacy.
(a) Any of the following personnel, medical, or similar records is within the statutory exemption if its disclosure would harm the individual concerned or be a clearly unwarranted invasion of his personal privacy:
(2) Medical histories and medical records concerning individuals, including applicants for licenses; or
(3) Any other detailed record containing personal information identifiable with a particular person.
(b) The purpose of this section is to provide a proper balance between the protection of personal privacy and the preservation of the public's rights to Corporation information by authorizing the protection of information that, if released, might unjustifiably invade an individual's personal privacy.