1. Member States shall ensure that the person notifying to the competent authority as referred to in Articles 7 to 10 shall not inform any other person, in particular the persons on behalf of whom the transactions have been carried out or parties related to those persons, of this notification, except by virtue of provisions laid down by law. The fulfilment of this requirement shall not involve the notifying person in liability of any kind, providing the notifying person acts in good faith.
2. Member States shall ensure that competent authorities do not disclose to any person the identity of the person having notified these transactions, if disclosure would, or would be likely to harm the person having notified the transactions. This provision is without prejudice to the requirements of the enforcement and the sanctioning regimes under Directive 2003/6/EC and to the rules on transfer of personal data laid down in Directive 95/46/EC.