All cybersecurity compliance information in this subtitle may not be divulged outside of the Commission except as directed by the Commission, or a court, or as authorized by law. The Office of Cybersecurity shall share cybersecurity compliance information collected in this chapter upon request with additional representatives as the Commission designates. These representatives shall be subject to the confidentiality requirements in §A of this regulation. The Office of Cybersecurity shall promptly notify a public service company upon the discovery of any unauthorized access, compromise, loss, or exfiltration of the public service company’s compliance information.