Every use of confidential information must be lawful. All those handling confidential information are responsible for ensuring that their use of, and access to that information complies with legal requirements.