Members and companies shall maintain confidentiality of credit information and data in their possession and limit the use and sharing of such information to the members, companies, and relevant persons and parties according to the Law and its Implementing Regulations. Without prejudice to the liability of their employees and workers for any violations they might commit, companies and members shall be held fully liable for any violations to the Law and its Implementing Regulations committed by their employees.