(a) When a request for records or information from NCUA includes information furnished by other Federal agencies, the system manager responsible for action on the request shall consult with the appropriate agency prior to making a decision to disclose or refuse access to the record, but the decision whether to disclose the record shall be made in the first instance by the system manager.

(b) Medical records may be disclosed on request to the individuals to whom they pertain unless disclosing the medical information directly to the requesting individual could have an adverse effect on the individual. Where medical information is potentially adverse to the requesting individual, the system manager responsible may advise the requesting individual that the medical records will be transmitted only to a physician designated in writing by the individual.