The laboratory formulates the Procedures for Protecting Client Confidential Information and Ownership, and shall adopt legally binding commitments to assume management responsibilities for the information obtained or generated in laboratory activities. The laboratory shall notify the client in advance of the information it intends to disclose. Unless there is an agreement between the laboratory and the client, all other information is regarded as patent information and should be kept confidential.
When the laboratory discloses confidential information in accordance with legal requirements or contract authorization, the information provided shall be notified to relevant clients or individuals unless prohibited by law.
Information about a client obtained from channels other than the client should be kept confidential between the client and the laboratory. Unless the information provider agrees, the laboratory should not inform the client of the information provider (source).
Personnel, including committee members, contractors, personnel from external agencies, or individuals representing the laboratory, shall keep all information obtained or generated during the implementation of laboratory activities confidential.