This section describes how various laws control the disclosure of personal information that we keep. We disclose information in the program records only when a legitimate need exists. For example, we disclose information to officers and employees of SSA who have a need for the record in the performance of their duties. We also must consider the laws identified below in the respective order when we disclose program information:

1. (a) Some laws require us to disclose information (§ 401.120); some laws require us to withhold information (§ 401.125). These laws control whenever they apply.
2. (b) If no law of this type applies in a given case, then we must look to FOIA principles. See § 401.130.
3. (c) When FOIA principles do not require disclosure, we may disclose information if both the Privacy Act and section 1106 of the Social Security Act permit the disclosure.

[62 FR 4143, Jan. 29, 1997, as amended at 72 FR 20940, Apr. 27, 2007]