These regulations guide the implementation of 28 CFR Part 22, Section 524(a) of the Omnibus Crime Control and Safe Streets Act of 1968, as amended. The regulations provide that identifiable research/statistical data may only be used (without consent of the individual) for research or statistical purposes. They further require that data may only be transferred in identifiable form pursuant to a transfer agreement that ensures recipient compliance with confidentiality limitations. The regulations also require that, except in noted circumstances, subjects must be advised that data will only be used for research or statistical purposes. Upon completion of a project, the regulations state that identifiers must be destroyed or otherwise separated from data and permanently secured. Copies of identifiable data are immune from administrative or judicial process. The regulations are presented and discussed under the subject headings of applicability, information protected, information not protected, authorized uses and transfers of data, subject notification requirements, final disposition of data, data security, and immunity. Suggested formats for privacy certification and an information transfer agreement are provided.