12 CFR § 222.31 - Limits on redisclosure of information.

---
identifier: "/us/cfr/t12/s222.31"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "12 CFR § 222.31 - Limits on redisclosure of information."
title_number: 12
title_name: "Banks and Banking"
section_number: "222.31"
section_name: "Limits on redisclosure of information."
chapter_name: "FEDERAL RESERVE SYSTEM"
subchapter_number: "A"
subchapter_name: "BOARD OF GOVERNORS OF THE FEDERAL RESERVE SYSTEM"
part_number: "222"
part_name: "FAIR CREDIT REPORTING (REGULATION V)"
positive_law: false
currency: "2026-04-05"
last_updated: "2026-04-05"
format_version: "1.1.0"
generator: "[email protected]"
authority: "15 U.S.C. 1681b, 1681c, 1681m and 1681s; Secs. 3, 214, and 216, Pub. L. 108-159, 117 Stat. 1952."
regulatory_source: "Reg. V, 68 FR 74469, Dec. 24, 2003, unless otherwise noted."
cfr_part: "222"
---


# 222.31 Limits on redisclosure of information.

(a) *Scope.* This section applies to banks that are members of the Federal Reserve System (other than national banks) and their respective operating subsidiaries, branches and agencies of foreign banks (other than Federal branches, Federal Agencies, and insured State branches of foreign banks), commercial lending companies owned or controlled by foreign banks, organizations operating under section 25 or 25A of the Federal Reserve Act (12 U.S.C. 601 *et seq.,* and 611 *et seq.*), and bank holding companies and affiliates of such holding companies (other than depository institutions and consumer reporting agencies).

(b) *Limits on redisclosure.* If a person described in paragraph (a) of this section receives medical information about a consumer from a consumer reporting agency or its affiliate, the person must not disclose that information to any other person, except as necessary to carry out the purpose for which the information was initially disclosed, or as otherwise permitted by statute, regulation, or order.