A bank employee discovers that a colleague is sharing confidential customer account information with a third-party vendor without authorization.What is the employee's primary ethical obligation?