No employee of FEMA shall disclose any record to any person or to another agency without the express written consent of the subject individual unless the disclosure is:

(a) To officers or employees of FEMA who have a need for the information in the official performance of their duties;

(b) Required by the provisions of the Freedom of Information Act, 5 U.S.C. 552.

(c) For a routine use as published in the notices in the Federal Register;

(d) To the Bureau of the Census for use pursuant to title 13, United States Code;

(e) To a recipient who has provided FEMA with advance adequate written assurance that the record will be used solely as a statistical research or reporting record subject to the following: The record shall be transferred in a form that is not individually identifiable. The written statement should include as a minimum (1) a statement of the purpose for requesting the records; and (2) certification that the records will be used only for statistical purposes. These written statements should be maintained as accounting records. In addition to deleting personal identifying information from records released for statistical purposes, the system manager shall ensure that the identity of the individual cannot reasonably be deduced by combining various statistical records;

(f) To the National Archives of the United States as a record which has sufficient historical or other value to warrant its continued preservation by the United States Government, or for evaluation by the Administrator of The National Archives and Records Administration or his designee to determine whether the record has such value;

(g) To another agency or instrumentality of any governmental jurisdiction within or under the control of the United States for civil or criminal law enforcement activity, if the activity is authorized by law, and if the head of the agency or instrumentality or his designated representative has made a written request to the Administrator specifying the particular portion desired and the law enforcement activity for which the record is sought;

(h) To a person showing compelling circumstances affecting the health and safety of an individual to whom the record pertains. (Upon such disclosure, a notification must be sent to the last known address of the subject individual.)

(i) To either House of Congress or to a subcommittee or committee (joint or of either House, to the extent that the subject matter falls within their jurisdiction;

(j) To the Comptroller General or any duly authorized representatives of the Comptroller General in the course of the performance of the duties of the Government Accountability Office; or

(k) Pursuant to the order of a court of competent jurisdiction.

(l) To consumer reporting agencies as defined in the Fair Credit Reporting Act (35 U.S.C. 1681a(f) or the Debt Collection Act of 1982 (31 U.S.C. 3711(d)(4)).

(a) Upon receipt of a request for disclosure, the system manager shall verify the right of the requestor to obtain disclosure pursuant to § 6.20. Upon that verification and subject to other requirements of this part, the system manager shall make the requested records available.

(b) If the system manager determines that the disclosure is not permitted under the provisions of § 6.20 or other provisions of this part, the system manager shall deny the request in writing and shall inform the requestor of the right to submit a request for review and final determination to the Administrator or designee.

(a) Except for disclosures made pursuant to § 6.20 (a) and (b), an accurate accounting of each disclosure shall be made and retained for 5 years after the disclosure or for the life of the record, whichever is longer. The accounting shall include the date, nature, and purpose of each disclosure, and the name and address of the person or agency to whom the disclosure is made;

(b) The system manager also shall maintain in conjunction with the accounting of disclosures;

(1) A full statement of the justification for the disclosure.

(2) All documentation surrounding disclosure of a record for statistical or law enforcement purposes; and

(3) Evidence of written consent to a disclosure given by the subject individual.

(c) Except for the accounting of disclosures made to agencies or instrumentalities in law enforcement activities in accordance with § 6.20 (g) or of disclosures made from exempt systems the accounting of disclosures shall be made available to the individual upon request. Procedures for requesting access to the accounting are in subpart C of this part.