17.0.2. The Authority must take all the measures necessary to protect the identity of persons who make a disclosure. However, the Authority may communicate the identity of such a person to the Director of Criminal and Penal Prosecutions or to another competent authority.