12 CFR § 1214.3 - General rule.

(a) In general, Non-FHFA Employees. The Director makes available to each regulated entity a copy of FHFA's report of examination of that regulated entity. The report of examination and all other confidential supervisory information is the property of FHFA and is provided to the regulated entity for its confidential internal use only. Under no circumstance shall any person in possession or control of confidential supervisory information make public or disclose, in any manner, the confidential supervisory information, or any portion of the contents thereof, except as authorized in writing by the Director.

(b) In general, FHFA Employees. Except as authorized in writing by the Director, no FHFA employee in possession or control of non-public information may disclose or permit the use or disclosure of such information in any manner or for any purpose.

(c) Persons possessing confidential supervisory information. All confidential supervisory information, for which the Director authorizes disclosure, remains the property of FHFA and may not be used or disclosed for any purpose other than that authorized under this part without the prior written permission of the Director.

(d) No Waiver. FHFA's disclosure of non-public information to any person does not constitute a waiver by FHFA of any privilege or FHFA's right to control, supervise, or impose limitations on, the subsequent use and disclosure of the non-public information.

(e) Penalties, Confidential Supervisory Information. Any person that discloses or uses confidential supervisory information except as authorized under this part may be subject to the penalties provided in 18 U.S.C. 641 and other applicable laws. In addition to those penalties, FHFA, regulated entity, Office of Finance, affiliate (as defined in 12 U.S.C. 4502(20)), or entity-affiliated party (as defined in 12 U.S.C. 4502(11)) employees may be subject to appropriate administrative, enforcement, or disciplinary proceedings.

(f) Penalties, Non-Public Information. Any FHFA employee that discloses or uses non-public information except as authorized under this part may be subject to the penalties provided in 18 U.S.C. 641, other applicable laws, and appropriate administrative, enforcement, or disciplinary proceedings.