1. Any confidential information received, exchanged or transmitted pursuant to this Regulation shall be subject to the conditions of professional secrecy laid down in paragraphs 2, 3 and 4.

2. The obligation of professional secrecy shall apply to:

(a) persons who work or who have worked for the Agency;

(b) auditors and experts instructed by the Agency;

(c) persons who work or who have worked for the national regulatory authorities or for other relevant authorities;

(d) auditors and experts instructed by national regulatory authorities or by other relevant authorities who receive confidential information in accordance with this Regulation.

3. Confidential information received by the persons referred to in paragraph 2 in the course of their duties may not be divulged to any other person or authority, except in summary or aggregate form such that an individual market participant cannot be identified, without prejudice to cases covered by criminal law, the other provisions of this Regulation or other relevant Union law.