1. Member States shall require that all persons working for or who have worked for competent authorities supervising credit and financial institutions for compliance with this Directive and auditors or experts acting on behalf of such competent authorities shall be bound by the obligation of professional secrecy.
Without prejudice to cases covered by criminal law, confidential information which the persons referred to in the first subparagraph receive in the course of their duties under this Directive may be disclosed only in summary or aggregate form, in such a way that individual credit and financial institutions cannot be identified.
2. Paragraph 1 shall not prevent the exchange of information between:
(a) competent authorities supervising credit and financial institutions within a Member State in accordance with this Directive or other legislative acts relating to the supervision of credit and financial institutions;
(b) competent authorities supervising credit and financial instit
…