StacksVerified U.S. regulatory reference

20 CFR §401.115

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
This section describes how various laws control the disclosure of personal information that we keep. We disclose information in the program records only when a legitimate need exists. For example, we disclose information to officers and employees of SSA who have a need for the record in the performance of their duties. We also must consider the laws identified below in the respective order when we disclose program information:
  1. (a)Some laws require us to disclose information (§ 401.120); some laws require us to withhold information (§ 401.125). These laws control whenever they apply.
  2. (b)If no law of this type applies in a given case, then we must look to FOIA principles. See § 401.130.
  3. (c)When FOIA principles do not require disclosure, we may disclose information if both the Privacy Act and section 1106 of the Social Security Act permit the disclosure.