“Unless and until published” by X itself the report needed to be protected by confidentiality, said a Commission spokesperson.