Any disclosure of test results or medical information is made in accordance with:

(a) The Privacy Act of 1974, under which the Bureau publishes routine uses of such information in the Department of Justice Privacy Act System of Records Notice entitled “Inmate Physical and Mental Health Record System, JUSTICE/BOP-007”; and

(b) The Correction Officers Health and Safety Act of 1998 (codified at 18 U.S.C. 4014), which provides that test results must be communicated to a person requesting the test, the person tested, and, if the results of the test indicate the presence of HIV, to correctional facility personnel consistent with Bureau policy.