Do not disclose nonpublic information to anyone outside the Agency, including to family and friends, except when disclosure is required for business purposes. Even then, take appropriate steps, such as execution of a Confidentiality Agreement, to prevent misuse of the information.