12 CFR 1022.31
§ 1022.31 Limits on redisclosure of information.
United States · 12 CFR — Banks and Banking · Status: effective
Cite this
- Citation
- 12 CFR 1022.31, § 1022.31 Limits on redisclosure of information, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/49506
- Permanent ID
ys:prov:49506@1- SHA-256
228e2cf3a641de3ef5e553d7bba521392c8b50c0e998153e68922e7cd1fe1296
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
(a) Scope. This section applies to any person, except for a person excluded from coverage of this part by section 1029 of the Consumer Financial Protection Act of 2010, title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act, Public Law 111-203, 124 Stat. 137.
(b) Limits on redisclosure. If a person described in paragraph (a) of this section receives medical information about a consumer from a consumer reporting agency or its affiliate, the person must not disclose that information to any other person, except as necessary to carry out the purpose for which the information was initially disclosed, or as otherwise permitted by statute, regulation, or order.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.