34. A licence holder must, when personal information is obtained from another licence holder in connection with a transaction, use the information for the sole purpose for which it was obtained. The holder may not communicate the information to another licence holder without authorization from the licence holder from whom the information was first obtained.