34 C.F.R. § 367.70
For the purpose of conducting audits, examinations, and compliance reviews, the DSA and all other service providers shall provide access to the Secretary and the Comptroller General, or any of their duly authorized representatives, to—
(c) All individual case records or files or consumer service records of individuals served under this part, including names, addresses, photographs, and records of evaluation included in those individual case records or files or consumer service records.
(Authority: Section 12(c) of the Rehabilitation Act of 1973, as amended; 29 U.S.C. 709(c))