The State or local agency must protect the confidentiality, and other rights, of any person making allegations or complaints against another individual participating in, or administering CSFP, except as necessary to conduct an investigation, hearing, or judicial proceeding.