Basically, the information the suppliers have access to is based on a need to know, and there are usually clauses in the contract that define the use of the information that would be permitted. Again, that information is protected. There's also a different set of rules under the Access to Information Act that would come into play.
There are mechanisms that are used to ensure that the information is protected.