Conventional bank licensees and approved persons must observe in full any obligations of confidentiality, including with respect to customer information. This requirement does not over-ride lawful disclosures.