Various authorities hold a lot of information about the business and operating conditions of different companies, i.e. information that is sensitive from a commercial and competitive perspective. The main purpose of the research project is to clarify and determine, as far as possible, which information about companies and their business and operating conditions, etc. can be kept secret. The question is thus which information can be protected and what the conditions for this are. A central part of this is to examine which criteria should be decisive in the actual secrecy assessment. This is important, not least in the light of the fact that it is now possible to easily search and compile large amounts of information. The data is collected in different activities that relate to the authorities' supervision, licensing, procurement, joint project planning, etc. The confidentiality rules have been given a partly different design for these different activities. An additional purpose is therefore to clarify the differences that exist regarding the scope of confidentiality protection depending on where the data occurs and to investigate the extent to which these are justified and, where this is not the case, propose how a more uniform and adequate protection can be designed.