28 CFR § 513.34
Protection of individual privacy—disclosure of records to third parties
July 24, 2020
(a) Information that concerns an individual and is contained in a system of records maintained by the Bureau shall not be disclosed to any person, or to another agency except under the provisions of the Privacy Act, 5 U.S.C. 552a, the Freedom of Information Act, 5 U.S.C. 552, and Departmental regulations.
(b) Lists of Bureau inmates shall not be disclosed.