(1) No person may disclose confidential information held by or obtained from the Public Procurement Office, a provincial treasury or a procuring institution for purposes of this Act, except—
(a) for carrying out a provision of this Act or any other legislation;
(b) with the permission of the Public Procurement Office, the relevant provincial treasury or the relevant procuring institution;
(c) for the purpose of legal proceedings, including any proceedings before a judge in chambers; or
(d) in terms of an order of court.
(2) The Public Procurement Office, a provincial treasury or a procuring institution must take appropriate measures in respect of personal information in its possession or under its control to prevent—
(a) loss of, damage to or unauthorised destruction of the information; and
(b) unlawful access to or processing of personal information, other than in accordance with this Act and the Protection of Personal Information Act, 2013 (Act No. 4 of 2013).