reg 11 Confidential information
(1) It is the duty of a network provider which acquires information in confidence from an infrastructure operator or rights holder as a result of the exercise of its rights under these Regulations, to— (a) use such information solely for the purpose for which it was supplied, restrict access to only those persons who require it for that purpose and respect at all times the confidentiality of the information provided; and (b) not pass such information to, or allow it to be used by, any other person within the network provider or otherwise. (2) The duty is enforceable, by a person who is or might be prejudiced by a failure to comply with it, in civil proceedings— (a) for an injunction; (b) for specific performance of a statutory duty under section 45 of the Court of Session Act 1988 ; or (c) for any other appropriate remedy or relief. (3) Nothing in this regulation affects any other rights a person may have to protect confidential information. (4) This regulation does not prevent the disclosure of information— (a) for the purposes of the network provider obtaining professional advice about its rights and obligations under these Regulations; (b) to OFCOM where disclosure is required so that they may carry out their functions under these Regulations; (c) where required for the bringing and carrying on of proceedings before the Tribunal or a court in relation to matters arising under these Regulations; or (d) to any person, where disclosure is required under any other provision of United Kingdom law or the law of any part of the United Kingdom.