32 C.F.R. § 1662.23
The FOIA exempts from disclosure records about individuals if disclosure would constitute a clearly unwarranted invasion of their personal privacy.