As codified at 12 CFR 232.
232.1 - Scope, General Prohibition and Definitions
232.2 - Rule of Construction for Obtaining and Using Unsolicited Medical Information
232.3 - Financial Information Exception for Obtaining and Using Medical Information
232.4 - Specific Exceptions for Obtaining and Using Medical Information