45 CFR 705.5: Disclosure of requested information to individuals.

The General Counsel, or one or more assistants designated by him or her, upon receiving a request for notification of the existence of a record or for access to a record shall:

(a) Determine whether such record exists;

(b) Determine whether access is available under the Privacy Act;

(c) Notify the requesting person of those determinations within 10 (ten) working days (excluding Saturdays, Sundays, and legal public holidays); and

(d) Provide access to information pertaining to that person that has been determined to be available.