[Code of Federal Regulations] [Title 20, Volume 2] [Revised as of April 1, 2004] From the U.S. Government Printing Office via GPO Access [CITE: 20CFR401.115] [Page 16] TITLE 20--EMPLOYEES' BENEFITS CHAPTER III--SOCIAL SECURITY ADMINISTRATION PART 401_PRIVACY AND DISCLOSURE OF OFFICIAL RECORDS AND INFORMATION--Table of Contents Subpart C_Disclosure of Official Records and Information Sec. 401.115 Disclosure of personal information in program records without the consent of the subject of the record. This section describes how various laws control the disclosure or confidentiality of personal information which we keep. We must consider these laws in the following order: (a) Some laws require us to disclose information (Sec. 401.120); some laws require us to withhold information (Sec. 401.125). These laws control whenever they apply. (b) If no law of this type applies in a given case, then we must look to FOIA principles. See Sec. 401.130. (c) When FOIA principles do not require disclosure, we may disclose information if both the Privacy Act and section 1106 of the Social Security Act permit the disclosure.