It is a concern. When we hire, all the "no"s are filtered through our in-house recruiters who have been through trainings on what they can and can't say to rejected applicants. The situation is very similar to giving former employees a reference when applying for a new job. You have to toe the line and be very sure that everything you say is verifiably factually correct or you can be held liable.