18 C.F.R. § 3b.225
(b) A written request or consent is not required if the disclosure is:
(5) To a recipient who has provided the appropriate system manager specified for each system of records with advance adequate written assurance that the record will be used solely as a statistical research or reporting record, and the record is to be transferred in a form that is not individually identifiable. The written statement of assurance should include at a minimum:
(ii) Certification that the record will only be used for statistical purposes.
In addition to stripping personally identifying information from records released for statistical purposes, the system manager will ensure that the identity of the individual cannot reasonably be deduced or determined by combining various statistical records, or by reference to public records or other available sources of information;