Activities carried out for clients shall be treated as confidential to that client unless otherwise agreed.

Information supplied by clients, the results and documents generated by the certification service and its subcontractors, the contract records that are retained, and the existence of the contract itself (other than any certificates issued) are all treated as �commercial in confidence� and will not be communicated to any third party without written agreement, unless the information is already in the public domain.

Where the law requires information to be disclosed to a third party, the client will be informed of the information disclosed.