40 CFR § 2.208 - Substantive criteria for use in confidentiality determinations.
(b) The business has satisfactorily shown that it has taken reasonable measures to protect the confidentiality of the information, and that it intends to continue to take such measures;
(c) The information is not, and has not been, reasonably obtainable without the business's consent by other persons (other than governmental bodies) by use of legitimate means (other than discovery based on a showing of special need in a judicial or quasi-judicial proceeding);
(d) No statute specifically requires disclosure of the information; and
(e) Either -
The following state regulations pages link to this page.