12 CFR §792.30

Except those authorized officials listed in § 792.14, or as provided in §§ 792.31-792.32, and subpart C of this part, no officer, employee, or agent of NCUA or of any federally insured credit union shall disclose or permit the disclosure of any exempt records of NCUA to any person other than those NCUA or credit union officers, employees, or agents properly entitled to such information for the performance of their official duties.