This comes from Pilot Medical Solutions, Inc. - Guide for Aviation Medical Examiners. Here is the link...
AME GUIDE
"4. PRIVACY OF MEDICAL INFORMATION
Within the FAA, access to an individual's medical information is strictly on a "need-to-know" basis. The safeguards of the Privacy Act apply to the application for airman medical certification and to other medical files in the FAA's possession. The FAA does not release medical information without an order from a court of competent jurisdiction, written permission from the individual to whom it applies, or, with the individual's knowledge, during litigation of matters related to certification. The FAA does, however, on request, disclose the fact that an individual holds an airman medical certificate and its class, and it may provide medical information regarding a pilot involved in an accident to the National Transportation Safety Board (NTSB) (or to a physician of the appropriate medical discipline who is retained by the NTSB) for use in aircraft accident investigation.
The Examiner, as a representative of the FAA, should treat the applicant's medical certification information in accordance with the requirements of the Privacy Act. Therefore, information should not be released without the written consent of the applicant or an order from a court of competent jurisdiction. In order to ensure that release of information is proper, whenever a court order or subpoena is received by the Examiner, the appropriate Regional Flight Surgeon (see Appendix C), or the Aeromedical Certification Division, AAM-300 (see address below), should be contacted. Similarly, unless the applicant's written consent for release is of a routine nature; e.g., accompanying a standard insurance company request, advice should be sought from the FAA before releasing any information. In all cases, copies of all released information should be retained.
5. RELEASE OF INFORMATION
Except in compliance with an order of a court of competent jurisdiction, or upon an applicant's written request, Examiners will not divulge or release copies of any reports prepared in connection with the examination to anyone other than the applicant or the FAA. A copy of the examination may be released to the applicant upon request. Upon receipt of a court subpoena or order, the Examiner shall notify the appropriate Regional Flight Surgeon. Other
Guide for Aviation Medical Examiners | Page 5"