Isn't the obligation only to provide registrant info to governments or when the info has been subpoenad? Or should namecheap hand over info to any private entit

Isn't the obligation only to provide registrant info to governments or when the info has been subpoenad? Or should namecheap hand over info to any private entity that thinks their trademark is being infringed upon or that the domain is malicious? Inb4 FB wants the info of the person begins "facebookisevil.com".