I spoke to somebody in the same industry as me over this issue last night and they verified a C&D order is required. If the websites and person in question don't agree to it well that's another matter - but it will be proof to the publisher that this information was released against my will. A shame it had to get this far.