I agree.
You recommended that compliance measures should be added at the end of the proposed rule 2.2 to require disclosure of confidential information in the form of a record to the appropriate authorities.
Do you have any recommendations for compliance measures with regard to confidential information that has been received in forms other than government records?