28 CFR 16.47: Requests for an accounting of record disclosures.
Except where accountings of disclosures are not required to be kept (as stated in paragraph (b) of this section), you may make a request for an accounting of any disclosure that has been made by the Department to another person, organization, or agency of any record about you. This accounting contains the date, nature, and purpose of each disclosure, as well as the name and address of the person, organization, or agency to which the disclosure was made. Your request for an accounting should identify each particular record in question and should be made by writing directly to the Department component that maintains the record, following the procedures in § 16.41.
Components are not required to provide accountings to you where they relate to:
(1) Disclosures for which accountings are not required to be kept—in other words, disclosures that are made to employees within the agency and disclosures that are made under the FOIA;
(2) Disclosures made to law enforcement agencies for authorized law enforcement activities in response to written requests from those law enforcement agencies specifying the law enforcement activities for which the disclosures are sought; or
(3) Disclosures made from law enforcement systems of records that have been exempted from accounting requirements.
You may appeal a denial of a request for an accounting to the Office of Information and Privacy in the same manner as a denial of a request for access to records (see § 16.45) and the same procedures will be followed.