Where the IPCC, or any person acting on its behalf, obtains information in the course of performing a function under these Regulations, that information may not be disclosed except as permitted under these Regulations or as otherwise prescribed by law.