1.   The obligation of professional secrecy shall apply to all persons who work or who have worked for CESR, for the competent authority or for any authority or person to whom the competent authority has delegated tasks, including auditors and experts contracted by the competent authority. Information covered by professional secrecy shall not be disclosed to another person or authority except where such disclosure is necessary for legal proceedings.

2.   All the information exchanged between CESR and the competent authorities and between competent authorities under this Regulation shall be considered confidential, except where CESR or the competent authority concerned states at the time of communication that such information may be disclosed or where such disclosure is necessary for legal proceedings.