Article 38
Disclosure of information transferred to third countries
The competent authority of a Member State shall require that confidential information communicated by it to a competent authority of a third country may be disclosed by that competent authority to third parties or authorities only with the prior express agreement of the competent authority which has transmitted the information, in accordance with its national law and provided that the information is disclosed only for the purposes for which that competent authority of the Member State has given its agreement, or where such disclosure is required by Union or national law or is necessary for legal proceedings in that third country.