---
kind: "section"
citation: "12 C.F.R. § 1022.32"
title: "12"
number: "1022.32"
heading: "Sharing medical information with affiliates."
url: "https://uscodex.org/cfr/12/1022.32"
---

# §1022.32. Sharing medical information with affiliates.

- (a) **Scope.** This section applies to any person, except for a person excluded from coverage of this part by section 1029 of the Consumer Financial Protection Act of 2010, title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act, Public Law 111-203, 124 Stat. 137.
- (b) **In general.** The exclusions from the term “consumer report” in section 603(d)(2) of the Act that allow the sharing of information with affiliates do not apply to a person described in [paragraph (a)](#a) of this section if that person communicates to an affiliate:
  - (1) Medical information;
  - (2) An individualized list or description based on the payment transactions of the consumer for medical products or services; or
  - (3) An aggregate list of identified consumers based on payment transactions for medical products or services.
- (c) **Exceptions.** A person described in [paragraph (a)](#a) of this section may rely on the exclusions from the term “consumer report” in section 603(d)(2) of the Act to communicate the information in [paragraph (b)](#b) of this section to an affiliate:
  - (1) In connection with the business of insurance or annuities (including the activities described in [section 18B](/cfr/12/18B.md) of the model Privacy of Consumer Financial and Health Information Regulation issued by the National Association of Insurance Commissioners, as in effect on January 1, 2003);
  - (2) For any purpose permitted without authorization under the regulations promulgated by the Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA);
  - (3) For any purpose referred to in [section 1179](/cfr/12/1179.md) of HIPAA;
  - (4) For any purpose described in [section 502(e)](/cfr/12/502.md?p=e) of the Gramm-Leach-Bliley Act;
  - (5) In connection with a determination of the consumer's eligibility, or continued eligibility, for credit consistent with [§ 1022.30](/cfr/12/1022.30.md) of this part; or
  - (6) **As otherwise permitted by order of the Bureau.**

## Notes

### Authority

Authority: 12 U.S.C. 5512, 5581; 15 U.S.C. 1681a, 1681b, 1681c, 1681c-1, 1681c-3, 1681e, 1681g, 1681i, 1681j, 1681m, 1681s, 1681s-2, 1681s-3, and 1681t; Sec. 214, Pub. L. 108-159, 117 Stat. 1952.

### Source

Source: 76 FR 79312, Dec. 21, 2011, unless otherwise noted.