(a) The OIG may disclose an individual's record to a person other than the individual to whom the record pertains in the following instances:

(1) Upon written request by the individual, including authorization under 24 CFR 16.5(e);

(2) With the prior written consent of the individual;

(3) To a parent or legal guardian of the individual under 5 U.S.C. 552a(h); or

(4) When permitted by the provisions of 5 U.S.C. 552a(b) (1) through (12).

(b) [Reserved]