(a) Except as provided in 5 U.S.C. 552a(b), the Board will not disclose any personal record information from systems of records it maintains to any individual other than the individual to whom the record refers, or to any other agency, without the express written consent of the individual to whom the record refers, or his or her representative or attorney.

(b) The Board's staff will take necessary steps, in accordance with the law and these regulations, to protect the security and integrity of the records and the personal privacy interests of the subjects of the records.