49 CFR § 801.56
Unwarranted invasion of personal privacy
November 18, 2020
Pursuant to 5 U.S.C. 552(b)(6), any personal, medical, or similar file is exempt from public disclosure if its disclosure would harm the individual concerned or would be a clearly unwarranted invasion of the person's personal privacy.