52 Pa. Code § 62.78
(a) An NGDC or NGS may not release private customer information to a third party unless the customer has been notified of this intent and has been given a convenient method, consistent with subsection (b), of notifying the entity of the customer’s desire to restrict the release of the private information. If the customer does not choose to restrict the release of one of the two restriction options in paragraphs (1) and (2), all of the customer’s private information may be released to a third party except for the telephone number. If the customer chooses to restrict the release of private customer information, the customer may restrict information released according to one of the following two restriction options:
This section cited in 52 Pa. Code § 62.71 (relating to purpose); 52 Pa. Code § 62.142 (relating to standards of conduct); and 52 Pa. Code § 62.224 (relating to POR programs).