45 CFR 400.27: Safeguarding and sharing of information.

(a) Except for purposes directly connected with, and necessary to, the administration of the program, a State must ensure that no information about, or obtained from, an individual and in possession of any agency providing assistance or services to such individual under the plan, will be disclosed in a form identifiable with the individual without the individual's consent, or if the individual is a minor, the consent of his or her parent or guardian.

(b) The provision by a State to a local resettlement agency or by a local resettlement agency to a State, of information as to whether an individual has applied for or is receiving cash assistance and the individual's address and telephone number is to be considered undertaken for a purpose directly connected with, and necessary to, the administration of the program during the first 36 months after such individual's entry into the United States.