12 CFR 222.31
§ 222.31 Limits on redisclosure of information.
United States · 12 CFR — Banks and Banking · Status: effective
Cite this
- Citation
- 12 CFR 222.31, § 222.31 Limits on redisclosure of information, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/44571
- Permanent ID
ys:prov:44571@1- SHA-256
d0b120a48522353d077dda6e366a54683b3031df5b5660f7a353ffdef85d6c5b
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
(a) Scope. This section applies to banks that are members of the Federal Reserve System (other than national banks) and their respective operating subsidiaries, branches and agencies of foreign banks (other than Federal branches, Federal Agencies, and insured State branches of foreign banks), commercial lending companies owned or controlled by foreign banks, organizations operating under section 25 or 25A of the Federal Reserve Act (12 U.S.C. 601 et seq., and 611 et seq.), and bank holding companies and affiliates of such holding companies (other than depository institutions and consumer reporting agencies).
(b) Limits on redisclosure. If a person described in paragraph (a) of this section receives medical information about a consumer from a consumer reporting agency or its affiliate, the person must not disclose that information to any other person, except as necessary to carry out the purpose for which the information was initially disclosed, or as otherwise permitted by statute, regulation, or order.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.