Except as provided by this part, employees or former employees of the CFPB, or others in possession of a record of the CFPB that the CFPB has not already made public, are prohibited from disclosing such records, without authorization, to any person who is not an employee of the CFPB.
12 C.F.R. §1070.4