Investment firm licensees and approved persons must observe in full any obligations of confidentiality, including with respect to client information. This requirement does not over-ride lawful disclosures.