1.   All information exchanged between the competent authorities under this Regulation that concerns business or operational conditions and other economic or personal affairs shall be confidential and shall be subject to professional secrecy, except where the competent authority states, when it exchanges such information with another competent authority, that such information may be disclosed or where such disclosure is necessary for legal proceedings.

2.   The obligation of professional secrecy shall apply to all persons who work or who have worked for the competent authority or for any third party to whom the competent authority has delegated its powers. Information subject to professional secrecy shall not be disclosed to any other person or authority except by virtue of Union or national law.