1.   The competent authorities of the home Member State shall maintain and share with the competent authorities of the host Member State an up-to-date contact list regarding each investment firm containing the relevant contact persons and contact information, including emergency contacts, for the exchange of information between the competent authorities of the home and host Member States.

2.   The competent authorities of host Member States shall inform the competent authorities of the home Member State of their contact persons and contact information and of any changes without undue delay. The competent authorities of the home Member State and host Member States shall review and update the contact list at least annually.

3.   The competent authorities of the home Member State and the competent authorities of the host Member States shall exchange information in written or electronic form and shall address the information to the relevant contact persons identified in the contact list referred to in paragraph 1 unless specified otherwise by a competent authority requesting information.

4.   Where information is exchanged in electronic form, secure channels of communication shall be used unless, and without prejudice of the application of Article 15 of Directive (EU) 2019/2034 and of rules on processing of personal data, the competent authorities providing and receiving information agree, where appropriate, to use unsecured channels of communication.

5.   Depending on the urgency of a specific situation, where competent authorities have identified findings about any potential problems and risks posed by an investment firm to the protection of clients or the stability of the financial system in the host Member State or cases of non-compliance, the following information may be first provided orally before being confirmed in written or electronic form:

6.   Upon receiving information, competent authorities shall confirm receipt of it. Where information has been provided in electronic form using a secure channel of communication, the confirmation of receipt shall be provided using the same channel. Confirmation of receipt shall not be required for information which has been provided orally or using a secure channel of communication which enables the sender to receive confirmation that the receiver has received the information.

7.   Where a college of supervisors has been established in accordance with Article 48(1) of Directive (EU) 2019/2034 and the competent authorities of the home Member State and competent authorities of the host Member States take part in the college as members or other participants in accordance with Commission Delegated Regulation (EU) 2023/1118 (5), paragraphs 1 to 6 of this Article shall not apply. In such cases, the information shall be exchanged in accordance with Article 48(6) of Directive (EU) 2019/2034.