A firm must not pass on a customer's details to third parties, including lead generators, debt management firms, lenders, owners, debt collectors or credit brokers, unless it is appropriate to do so.
[Note: paragraph 3.9e of DCG]