Nothing in this Part shall require the Employee Health Service to provide individuals with access to information which would reveal the identity of a source who furnished it under an express promise that his or her identity would be held in confidence.