32 CFR § 2102.31
Disclosure of a record to persons other than the individual to whom it pertains
July 1, 2020
(a) Except as provided by the Privacy Act, 5 U.S.C. 552a(b), the NSC will not disclose a record concerning an individual to another person or agency without the prior written consent of the individual to whom the record pertains.