Except as provided in COMAR 20.62.04 and §B of this regulation, a subscriber organization may not disclose energy usage or personally identifiable information about a subscriber, or a subscriber’s billing, payment, and credit information, without the subscriber’s consent. A subscriber organization may disclose a subscriber’s billing, payment, and credit information for the sole purpose of facilitating billing, bill collection, and credit reporting. A subscriber organization shall provide a customer with a copy of the subscriber organization’s customer information privacy policy. A subscriber organization shall treat information received from prospective customers, including those who do not subscribe, in accordance with §§A and C of this regulation.