(1) A supervisory authority may disclose to another supervisory authority information it holds relevant to its functions under these Regulations, provided the disclosure is made for purposes connected with the effective exercise of the functions of either supervisory authority under these Regulations.
(2) Information disclosed to a supervisory authority under paragraph (1) may not be further disclosed by that authority, except -
(a) in accordance with paragraph (1);
(aa) by the Authority to the PRA, where the information concerns a PRA-authorised person or a person who has a qualifying relationship with a PRA-authorised person;
(b) with a view to the institution of, or otherwise for the purposes of, any criminal or other enforcement proceedings; or
(c) as otherwise required by law.