1.   Payment card schemes and processing entities which belong to the same legal entity or group shall define and disclose publicly on their website a code of conduct, setting out how their respective staff shall act to ensure compliance with this Regulation. The code of conduct shall also set effective enforcement mechanisms.

2.   The code of conduct shall, in particular, define rules to prevent the sharing of sensitive information, as referred to in Article 14 between payment card schemes and processing entities. The code of conduct shall be subject to review by competent authorities.