A person who receives, compiles, retains or reports confidential information that pertains to a consumer or prospective consumer shall protect the confidentiality of the information and shall

(a) use the information only for a purpose permitted in terms of this Act, and

(b) disclose information in good faith and in accordance with the provisions of this Act.