See note §A.5.h on what "legal mandates" refers to. See also §A.3.d. CPS9.15.2 refers to PP. WT4.1, "applicable statutory or regulatory requirements to keep information confidential."