Thank you for your question, which raises a challenge that we are very familiar with: you can't do anything to protect yourself from toxic substances if you don't have information about them.
When a company asks to have its product information declared commercially confidential, which is granted without asking for justification and assuming that the request is legitimate, that is very problematic. As other groups have said, according to audits by the U.S. Environmental Protection Agency, this is not legitimate in one third of cases.
In order to successfully reverse the burden of proof, the request for confidentiality must be justified. In that regard, it would be more prudent not to assume that the request will be automatically granted.