12 CFR § 1022.31 - Limits on redisclosure of information.

---
identifier: "/us/cfr/t12/s1022.31"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "12 CFR § 1022.31 - Limits on redisclosure of information."
title_number: 12
title_name: "Banks and Banking"
section_number: "1022.31"
section_name: "Limits on redisclosure of information."
chapter_name: "CONSUMER FINANCIAL PROTECTION BUREAU"
part_number: "1022"
part_name: "FAIR CREDIT REPORTING (REGULATION V)"
positive_law: false
currency: "2026-04-05"
last_updated: "2026-04-05"
format_version: "1.1.0"
generator: "[email protected]"
authority: "12 U.S.C. 5512, 5581; 15 U.S.C. 1681a, 1681b, 1681c, 1681c-1, 1681c-3, 1681e, 1681g, 1681i, 1681j, 1681m, 1681s, 1681s-2, 1681s-3, and 1681t; Sec. 214, Pub. L. 108-159, 117 Stat. 1952."
regulatory_source: "76 FR 79312, Dec. 21, 2011, unless otherwise noted."
cfr_part: "1022"
---


# 1022.31 Limits on redisclosure of information.

(a) *Scope.* This section applies to any person, except for a person excluded from coverage of this part by section 1029 of the Consumer Financial Protection Act of 2010, title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act, Public Law 111-203, 124 Stat. 137.

(b) *Limits on redisclosure.* If a person described in paragraph (a) of this section receives medical information about a consumer from a consumer reporting agency or its affiliate, the person must not disclose that information to any other person, except as necessary to carry out the purpose for which the information was initially disclosed, or as otherwise permitted by statute, regulation, or order.