A person to whom the employer, pursuant to his obligations under these Regulations, entrusts any information or document on terms requiring it to be held in confidence shall not disclose that information or document except, where the terms permit him to do so, in accordance with those terms.

In this regulation a person referred to in paragraph (1) to whom information or a document is entrusted is referred to as a “recipient”.

The obligation to comply with paragraph (1) is a duty owed to the employer, and a breach of the duty is actionable accordingly (subject to the defences and other incidents applying to actions for breaches of statutory duty).

Paragraph (3) shall not affect any legal liability which any person may incur by disclosing the information or document, or any right which any person may have in relation to such disclosure otherwise than under this regulation.

No action shall lie under paragraph (3) where the recipient reasonably believed the disclosure to be a “protected disclosure” within the meaning given to that expression by section 43A of the 1996 Act M1.

A recipient to whom the employer has entrusted any information or document on terms requiring it to be held in confidence may apply to the CAC for a declaration as to whether it was reasonable for the employer to require the recipient to hold the information or document in confidence.

If the CAC considers, on an application under paragraph (6), that the disclosure of the information or document by the recipient would not, or would not be likely to, harm the legitimate interests of the undertaking, it shall make a declaration that it was not reasonable for the employer to require the recipient to hold the information or document in confidence.

If a declaration is made under paragraph (7), the information or document shall not at any time thereafter be regarded as having been entrusted to the recipient who made the application under paragraph (6), or to any other recipient, on terms requiring it to be held in confidence.

The employer is not required to disclose any information or document to a person for the purposes of these Regulations where the nature of the information or document is such that, according to objective criteria, the disclosure of the information or document would seriously harm the functioning of, or would be prejudicial to, the undertaking.

If the CAC makes a declaration that the disclosure of the information or document in question would not, according to objective criteria, be seriously harmful or prejudicial as mentioned in paragraph (1), the CAC shall order the employer to disclose the information or document.