VA rules implementing the Privacy Act of 1974 are in 38 CFR 1.575 through 1.584.
Subpart 824.2_Freedom of Information Act