; and (5) by reviewing data and other assets in the possession of the eligible entity— (A) for evidence that the data or other asset— (i) has been tampered with; or (ii) has otherwise been the subject of threat activity; and (B) while ensuring an adequate chain of custody to enable criminal investigation and prosecution. (c) Release of information (1) Protection of information Any information collected or created by the Commission in carrying out activities under subsection (b), including any report prepared under subsection (g)(1)(A)— (A) to the extent that the information is not already designated as critical electric infrastructure information, shall be handled by the Commission as if it had been designated by the Commission as critical electric infrastructure information under this subpart; (B) shall be exempt from disclosure under section 552(b)(3) of title 5, United States Code; and (C) shall not be made available by any Federal, State, political subdivision, or Tribal authority under any applicable law requiring public disclosure of information or records. (2) Voluntary release (A) Consent required Subject to subparagraph (C), if the source of any information described in paragraph (1) provides consent, the Commission may share that information with— (i) the Electric Reliability Organization; (ii) a regional entity; (iii) an information sharing and analysis center; or (iv) an authority of a State, political subdivision, or Indian Tribe that is involved in protecting energy infrastructure from threats. (B) Advance consent Consent to the disclosure of information by the Commission under subparagraph (A) may— (i) be provided in advance of the disclosure of that information to, or the creation of that information by, the Commission