312.10—Disclosure of OIG records to other than subject.
No record containing personally identifiable information within a OIG system of records shall be disclosed by any means to any person or agency outside the Department of Defense, except with the written consent of the individual subject of the record or as provided for in the Act and DoD 5400.11-R ( 32 CFR part 286a ).