52 Pa. Code § 54.8
(a) An EDC or EGS may not release private customer information to a third party unless the customer has been notified of the intent and has been given a convenient method of notifying the entity of the customer’s desire to restrict the release of the private information. Specifically, a customer may restrict the release of either the following:
This section cited in 52 Pa. Code § 54.1 (relating to purpose).