The obligation depends on your contract. Data requests are legitimate, but the scope, format, and confidentiality limits can be negotiated; protective mechanisms should be put in place for process data that qualifies as a trade secret.
In practice the request usually traces back to the customer’s own CSRD or CBAM reporting, so a proportionate, well-documented response protects the commercial relationship. We set up a standard data-sharing template — primary figures where you have them, sound estimates where you do not — under a confidentiality undertaking, so you disclose what is genuinely needed and nothing more.
Shall we apply this matter to your situation?
Tell us your specific situation in a few sentences; we'll assess it with the right team.