Customer information shall be protected as confidential to the extent authorized by law.