A Tribe or Tribal organization must include in its Tribal IV-D plan safeguarding provisions in accordance with this section:

(a) Procedures under which the use or disclosure of personal information received by or maintained by the Tribal IV-D agency is limited to purposes directly connected with the administration of the Tribal IV-D program, or titles IV-A and XIX with the administration of other programs or purposes prescribed by the Secretary in regulations.

(b) Procedures for safeguards that are applicable to all confidential information handled by the Tribal IV-D agency and that are designed to protect the privacy rights of the parties, including:

(1) Safeguards against unauthorized use or disclosure of information relating to proceedings or actions to establish paternity, or to establish, modify or enforce support;

(2) Prohibitions against the release of information on the whereabouts of one party or the child to another party against whom a protective order with respect to the former party or the child has been entered;

(3) Prohibitions against the release of information on the whereabouts of one party or the child to another person if the Tribe has reason to believe that the release of the information to that person may result in physical or emotional harm to the party or child; and

(4) Procedures in accordance with any specific safeguarding regulations applicable to Tribal IV-D programs promulgated by the Secretary.

(c) Procedures under which sanctions must be imposed for the unauthorized use or disclosure of information covered by paragraphs (a) and (b) of this section.