(1) A person notifying the Bank under Regulation 13 shall not inform any other person, in particular the persons on behalf of whom the transactions concerned have been carried out or parties related to those persons, of the notification, unless under an obligation to do so under an enactment or rule of law.
(2) Without prejudice to the provisions of Part 5 or the rules on the transfer of personal data laid down in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 [ OJ L281, 23.11.1995, p.31] on the protection of individuals with regard to the processing of personal data and on the free movement of such data, the Bank shall not disclose to any person the identity of the person (''notifier") having notified it under Regulation 13 of the transactions concerned if the disclosure would, or would be likely to, harm the notifier.