Except as limited by § 480.139(a) and § 480.140 of this subpart, QIOs must disclose to the Department all information requested by the Department in the manner and form requested. The information can include confidential and non-confidential information and requests can include those made by any component of the Department, such as CMS.