28 CFR 512.15: Access to Bureau of Prisons records.

(a) Employees, including consultants, of the Bureau who are conducting authorized research projects shall have access to those records relating to the subject which are necessary to the purpose of the research project without having to obtain the subject's consent.

(b) A non-employee of the Bureau is limited in access to information available under the Freedom of Information Act (5 U.S.C. 552).

(c) A non-employee of the Bureau may receive records in a form not individually identifiable when advance adequate written assurance that the record will be used solely as a statistical research or reporting record is provided to the agency (5 U.S.C. 552a(b)(5)).