(1) The Bank shall immediately supply the competent authorities of other Member States for the purposes of the Directive or of Regulation (EU) No 600/2014 with information required for the purposes of carrying out the duties of the competent authorities set out in the provisions adopted pursuant to this Directive or the provisions of the Regulation.
(2) The Bank, in exchanging information with other competent authorities under these Regulations may indicate that the information supplied must not be disclosed without the express agreement of the Bank, in which case such information may be exchanged solely for the purposes for which the Bank gave its agreement.
(3) The Bank shall not transmit any such information to other persons -
(a) without the express agreement of the competent authority which disclosed the information, and
(b) solely for the purposes for which the competent authority gave its agreement,
except in duly justified circumstances.
…