This part sets forth the policy and procedures with respect to the production or disclosure of:

(a) Material contained in the files of NACIC,

(b) Information relating to or based upon material contained in the files of NACIC,

(c) Information acquired by any person while such person is an employee of NACIC as part of the performance of that person's official duties or because of that person's association with NACIC.