A competent authority may disclose information received from another competent authority only if:
(a) it has obtained the written agreement of that competent authority and the information is disclosed only for the purposes for which that competent authority gave its agreement; or
(b) such disclosure is necessary for legal proceedings.