12 CFR 310.6: Special procedures: Medical records.

Medical records shall be disclosed on request to the individuals to whom they pertain, except, if in the judgment of the Corporation, the transmission of the medical information directly to the requesting individual could have an adverse effect upon such individual. In the event medical information is withheld from a requesting individual due to any possible adverse effect such information may have upon the individual, the Corporation shall transmit such information to a medical doctor named by the requesting individual for release of the patient.