45 CFR 2508.4 - When can Corporation records be disclosed?
(a) (1) The Corporation will not disclose any record that is contained in its system of records by any means of communication to any person, or to another agency, except pursuant to a written request by, or with the prior written consent of the individual to whom the record pertains, unless disclosure of the record would be:
(i) To employees of the Corporation who maintain the record and who have a need for the record in the performance of their official duties;
(ii) When required under the provisions of the Freedom of Information Act (5 U.S.C. 552);
(iii) For routine uses as appropriately published in the annual notice of the Federal Register;
(iv) To the Bureau of the Census for purposes of planning or carrying out a census or survey or related activity pursuant to the provisions of title 13;
(v) To a recipient who has provided the Corporation with advance adequate written assurance that the record will be used solely as a statistical research or reporting record, and the record is to be transferred in a form that is not individually identifiable;
(vi) To the National Archives and Records Administration of the United States as a record which has sufficient historical or other value to warrant its continued preservation by the United States Government, or for evaluation by the Archivist of the United States or the designee of the Archivist to determine whether the record has such value;
(vii) To another agency or to an instrumentality of any governmental jurisdiction within or under the control of the United States for civil or criminal law enforcement activity if the activity is authorized by law, and if the head of the agency or instrumentality has made a written request to the Corporation for such records specifying the particular portion desired and the law enforcement activity for which the record is sought. Such a record may also be disclosed by the Corporation to the law enforcement agency on its own initiative in situations in which criminal conduct is suspected provided that such disclosure has been established as a routine use or in situations in which the misconduct is directly related to the purpose for which the record is maintained;
(viii) To a person pursuant to a showing of compelling circumstances affecting the health or safety of any individual if, upon such disclosure, notification is transmitted to the last known address of such individual;
(ix) To either House of Congress, or, to the extent of matter within its jurisdiction, any committee or subcommittee thereof, any joint committee of Congress or subcommittee of any such joint committee;
(x) To the Comptroller General or any of his or her authorized representatives, in the course of the performance of official duties in the General Accounting Office;
(xi) Pursuant to an order of a court of competent jurisdiction served upon the Corporation pursuant to 45 CFR 1201.3, and provided that if any such record is disclosed under such compulsory legal process and subsequently made public by the court which issued it, the Corporation must make a reasonable effort to notify the individual to whom the record pertains of such disclosure;
(xii) To a contractor, expert, or consultant of the Corporation (or an office within the Corporation) when the purpose of the release to perform a survey, audit, or other review of the Corporation's procedures and operations; and
(xiii) To a consumer reporting agency in accordance with section 3711(f) of title 31.