There are strict guidelines. If they violate that agreement they can lose their right to obtain the information.