The Certification Body shall establish documented policies and procedures for the maintenance and release of information.
The Certification Body shall, through legally enforceable agreements, keep confidential all information obtained during the certification process. All members of the Certification Committee and the Certification Staff shall be required to execute a Confidentiality Agreement upon appointment/election or hire.
The Certification Body shall ensure that information obtained during the certification process, or from sources other than the applicant, candidate or certified person, is not disclosed to an unauthorized party without the written consent of the individual, except where law requires such information to be disclosed.
When the Certification Body is required by law to release confidential information, the person concerned shall, unless prohibited by law, be notified as to what information was provided. A consent to release information is not required when the request is received from a legally authorized entity.
The Certification Body shall ensure that the activities of related bodies (proctor) do not compromise confidentiality.