17 C.F.R. § 242.813
A security-based swap execution facility shall not use for business or marketing purposes any proprietary data or personal information it collects or receives, from or on behalf of any person, for the purpose of fulfilling its regulatory obligations; provided, however, that a security-based swap execution facility may use such data or information for business or marketing purposes if the person from whom it collects or receives such data or information clearly consents to the security-based swap execution facility's use of such data or information in such manner. A security-based swap execution facility shall not condition access to its market(s) or market services on a person's consent to the security-based swap execution facility's use of proprietary data or personal information for business or marketing purposes. A security-based swap execution facility, where necessary for regulatory purposes, may share such data or information with one or more security-based swap execution facilities or national securities exchanges registered with the Commission.
17 C.F.R. §242.813