Except as provided in § 1008.17, the DOE shall not disclose any record which is contained in a system of records, by any means of communication, to any agency or to any person other than the individual who is the subject of the record.