1. The obligation of professional secrecy shall apply to all natural or legal persons who work or who have worked for the competent authority or for any authority or natural or legal person to whom the competent authority has delegated tasks, including auditors and experts contracted by the competent authority. Confidential information covered by professional secrecy may not be disclosed to any other natural or legal person or authority except where such disclosure is necessary for legal proceedings.
2. All the information exchanged between the competent authorities under this Regulation that concerns business or operational conditions and other economic or personal affairs shall be considered confidential and shall be subject to the requirements of professional secrecy, except where the competent authority states at the time of communication that such information may be disclosed or such disclosure is necessary for legal proceedings.