It is the policy of the Food and Drug Administration that record systems should be exempted from the Privacy Act only to the extent essential to the performance of law enforcement functions under the laws that are administered and enforced by the Food and Drug Administration or that govern the agency.