Article 25 Data protection
1. All exchange of information pursuant to this Directive shall be subject to Regulation (EU) 2016/679 of the European Parliament and of the Council [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).]. However, Member States shall, for the purposes of the correct application of this Directive, restrict the scope of the obligations and rights provided for in Article 13, Article 14(1) and Article 15, of Regulation (EU) 2016/679, to the extent required in order to safeguard the interests referred to in point (e) of Article 23(1) of that Regulation.