Information can only be shared on a "need to know" basis with individuals who have been authorized by the appropriate Information designee, either by job function or by name. Sharing such information with individuals outside of the company requires authorization by the appropriate Information Guardian/designee.