§ 37.855 How should I handle protected data?
Prior to releasing or disclosing data marked with a restrictive legend (as described in § 37.850) to third parties, you should require those parties to agree in writing that they will:
(a) Use the data only for governmental purposes; and
(b) Not release or disclose the data without the permission of the licensor (i.e., the recipient).