CFR /  Title 5  /  Part 297  /  Sec. 297.204 Access by the representative of the data subject.

A record may be disclosed to a representative of the individual to whom the record pertains after the system manager receives written authorization from the individual who is the subject of the record.