The identity of any individual who furnishes information relating to, or assisting in, an investigation or a compliance review, including the identity of any individual who files a complaint, must be kept confidential to the extent possible, consistent with a fair determination of the issues. An individual whose identity it is necessary to disclose must be protected from retaliation (see Sec. 37.11).