Either regulator may make rules ("control of information rules") about the disclosure and use of information held by an authorised person ("A").
Control of information rules may—
require the withholding of information which A would otherwise be required to disclose to a person ("B") for or with whom A does business in the course of carrying on any regulated or other activity;
specify circumstances in which A may withhold information which A would otherwise be required to disclose to B;
require A not to use for the benefit of B information—
which is held by A, and
which A would otherwise be required to use for the benefit of B;
specify circumstances in which A may decide not to use for the benefit of B information within paragraph (c).