This section describes how various laws control the disclosure of personal information that we keep. We disclose information in the program records only when a legitimate need exists. For example, we disclose information to officers and employees of SSA who have a need for the record in the performance of their duties. We also must consider the laws identified below in the respective order when we disclose program information:

(a) Some laws require us to disclose information (§ 401.120); some laws require us to withhold information (§ 401.125). These laws control whenever they apply.

(b) If no law of this type applies in a given case, then we must look to FOIA principles. See § 401.130.

(c) When FOIA principles do not require disclosure, we may disclose information if both the Privacy Act and section 1106 of the Social Security Act permit the disclosure.