(a) No information obtained in the course of conducting AHCPR contract activities under this subpart, if the entity or individual supplying the information or described in it is identifiable, may be used for any purpose other than the purpose for which it was supplied, unless the identifiable entity or individual supplying the information or described in it has consented to such other use, in the recorded form and manner as the Administrator may require.

(b) No information obtained in the course of conducting AHCPR contract activities under this subpart may be published or released in other form if the individual who supplied the information or who is described in it is identifiable, unless such individual has consented, in the recorded form and manner as the Administrator may require, to such publication or release.