Any confidential information received, exchanged or transmitted pursuant to this Regulation shall be subject to the conditions of professional secrecy laid down in paragraphs 2 and 3.

The obligation of professional secrecy shall apply to all persons who work or have worked for the entities referred to in Article 12(2) and the competent authorities referred to in Article 16, for ESMA, EBA and EIOPA, or for auditors and experts instructed by the competent authorities or ESMA, EBA and EIOPA. No confidential information that those persons receive in the course of their duties shall be divulged to any person or authority, except in summary or aggregate form such that an individual counterparty, trade repository or any other person cannot be identified, without prejudice to national criminal or tax law or to this Regulation.

Without prejudice to national criminal or tax law, the competent authorities, ESMA, EBA, EIOPA, bodies or natural or legal persons other than competent authorities, which receive confidential information pursuant to this Regulation may use it only in the performance of their duties and for the exercise of their functions, in the case of the competent authorities, within the scope of this Regulation or, in the case of other authorities, bodies or natural or legal persons, for the purpose for which such information was provided to them or in the context of administrative or judicial proceedings specifically relating to the exercise of those functions, or both. Where ESMA, EBA, EIOPA, the competent authority or another authority, body or person communicating information consents thereto, the authority receiving the information may use it for other non-commercial purposes.

Paragraphs 2 and 3 shall not prevent ESMA, EBA, EIOPA, the competent authorities or the relevant central banks from exchanging or transmitting confidential information in accordance with this Regulation and with other legislation applicable to investment firms, credit institutions, pension funds, insurance and reinsurance intermediaries, insurance undertakings, regulated markets or market operators or otherwise with the consent of the competent authority or other authority or body or natural or legal person that communicated the information.

Paragraphs 2 and 3 shall not prevent the competent authorities from exchanging or transmitting confidential information, in accordance with national law, that has not been received from a competent authority of another Member State.