12 C.F.R. § 1214.4
(b) Regulated Entity Agents and Consultants.
(2) A regulated entity, the Office of Finance, or a director, officer, employee, or agent thereof, also may disclose confidential supervisory information to a consultant under this paragraph if the consultant is under a written contract to provide services to the regulated entity or the Office of Finance and the consultant has agreed in writing: