(1) The Bank may transfer to a third country data and the analysis of data on a case-by-case basis where the conditions laid down in Article 25 or 26 of Directive 95/46/EC are met and where the Bank is satisfied that the transfer is necessary for the purpose of these Regulations.
(2) The Bank shall only disclose information received from a competent authority of another Member State to a supervisory authority of a third country where Bank has obtained express agreement of the competent authority which transmitted the information and, where applicable, the information is disclosed solely for the purposes for which that competent authority gave its agreement.