Accessing Confidential Information U6: Confidential information must only be accessed for authorized purposes.
Collecting Confidential Information U17: Only the minimum information reasonably necessary to accomplish the intended business purpose should be obtained
Sharing Confidential Information U7: Confidential information (Level 2+) must only be shared with those authorized to receive it.