5 CFR § 2634.604 - Custody of and denial of public access to confidential reports.
(a) Any report filed with an agency under subpart I of this part will be retained by the agency for a period of six years after receipt. After the six-year period, the report must be destroyed unless needed in an ongoing investigation. See also the OGE/GOVT-2 Governmentwide executive branch Privacy Act system of records (available for inspection at the Office of Government Ethics or on OGE's website, www.oge.gov), as well as any applicable agency system of records.
(b) The reports filed pursuant to subpart I of this part are confidential. No member of the public will have access to such reports, except pursuant to the order of a Federal court or as otherwise provided under the Privacy Act. See 5 U.S.C. 552a and the OGE/GOVT-2 Privacy Act system of records (and any applicable agency system); 5 U.S.C. app. (Ethics in Government Act of 1978, section 107(a)); sections 201(d) and 502(b) of Executive Order 12674, as modified by Executive Order 12731; and § 2634.901(d).