Any person with written authorization from the individual listed on the birth record can order a replacement Report of Birth Abroad.
For example, the applicant can authorize the parent or legal guardian to order a copy of the Report of Birth Abroad.
Instructions - Report of Birth Abroad (link):
How to Replace or Amend a Consular Report of Birth Abroad (CRBA) (state.gov)
The department does not sell data. There is a fee collected for qualifying entities who need the info for authorized purposes (i.e. insurance companies, law enforcement, financial institutions, etc.). The only information released is what is authorized by the Federal Driver Privacy Protection Act of 1994 and the Tennessee Uniform Motor Vehicle Records Disclosure Act and is regulated under federal and state laws, along with the department’s rules.