12 CFR §366.13

1. (a)Neither you nor any person who performs services on your behalf may use or disclose information obtained from us or a third party in connection with an FDIC contract, unless:
   1. (1)The contract allows or we authorize the use or disclosure;
   2. (2)The information is generally available to the general public; or
   3. (3)We make the information available to the general public.
2. (b)The following are examples of when your use of confidential information is inappropriate. These examples are not inclusive.
   1. (1)Disclosing information about an asset, such as internal asset valuations, appraisals or environmental reports, except as part of authorized due diligence materials, to a prospective asset purchaser.
   2. (2)Disclosing a borrower's or guarantor's personal or financial information, such as a financial statement to an unauthorized party.