24 CFR §2003.6

1. (a)The OIG may disclose an individual's record to a person other than the individual to whom the record pertains in the following instances:
   1. (1)Upon written request by the individual, including authorization under 24 CFR 16.5(e);
   2. (2)With the prior written consent of the individual;
   3. (3)To a parent or legal guardian of the individual under 5 U.S.C. 552a(h); or
   4. (4)When permitted by the provisions of 5 U.S.C. 552a(b) (1) through (12).
2. (b)[Reserved]