differentiate the confidentiality requirements of the statutory law