1. Without prejudice to the presumption of innocence, the competent authorities of the home and the host Member States shall update, in a timely manner, the corresponding IMI file with information regarding disci­plinary actions or criminal sanctions which relate to a prohibition or restriction and which have consequences for the pursuit of activities by the holder of a European Professional Card under this Directive. In so doing they shall respect personal data protection rules provided for in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data [OJ L 281, 23.11.1995, p. 31.] and Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) [OJ L 201, 31.7.2002, p. 37.]. Such updates shall include the deletion of information which is no longer required. The holder of the European Professional Card as well as the competent authorities that have access to the corresponding IMI file shall be informed immediately of any updates. That obligation shall be without prejudice to the alert obligations for Member States under Article 56a.

2. The content of the information updates referred to in paragraph 1 shall be limited to the following:

(a) the identity of the professional;