44 CFR §6.22

1. (a)Except for disclosures made pursuant to § 6.20 (a) and (b), an accurate accounting of each disclosure shall be made and retained for 5 years after the disclosure or for the life of the record, whichever is longer. The accounting shall include the date, nature, and purpose of each disclosure, and the name and address of the person or agency to whom the disclosure is made;
2. (b)The system manager also shall maintain in conjunction with the accounting of disclosures;
   1. (1)A full statement of the justification for the disclosure.
   2. (2)All documentation surrounding disclosure of a record for statistical or law enforcement purposes; and
   3. (3)Evidence of written consent to a disclosure given by the subject individual.
3. (c)Except for the accounting of disclosures made to agencies or instrumentalities in law enforcement activities in accordance with § 6.20 (g) or of disclosures made from exempt systems the accounting of disclosures shall be made available to the individual upon request. Procedures for requesting access to the accounting are in subpart C of this part.