(a) Access. Sections 401.30 through 401.95, which set out SSA's rules for implementing the Privacy Act, apply to records retrieved by an individual's name or personal identifier subject to the Privacy Act. The rules in §§ 401.30 through 401.95 also apply to information developed by medical sources for the Social Security program and shall not be accessed except as permitted by this part.

(b) Disclosure—(1) Program records. Regulations that apply to the disclosure of information about an individual contained in SSA's program records are set out in §§ 401.100 through 401.200 of this part. These regulations also apply to the disclosure of other Federal program information which SSA maintains. That information includes:

(i) Health insurance records which SSA maintains for the Health Care Financing Administration's (HCFA) programs under title XVIII of the Social Security Act. We will disclose these records to HCFA. HCFA may redisclose these records under the regulations applying to records in HCFA's custody;

(ii) Black lung benefit records which SSA maintains for the administration of the Federal Coal Mine Health and Safety Act; (However, this information is not covered by section 1106 of the Social Security Act.) and

(iii) Information retained by medical sources pertaining to a consultative examination performed for the Social Security program shall not be disclosed except as permitted by this part.

(2) Nonprogram records. Section 401.110 sets out rules applicable to the disclosure of nonprogram records, e.g., SSA's administrative and personnel records.