195. Competent authorities should provide each other, while respecting the applicable data protection legislation, with any information they hold about a member of the management body or key function holder for the performance of a suitability assessment. The information should also include a justification for the decision taken regarding that person's suitability. For this purpose, unless national law permits it without requiring consent, the requesting competent authority should seek from members of the management body or key function holders consent:

a. to request from any competent authority information relating to them which is needed for the suitability assessment;

b. to process and use the provided information for the suitability assessment, if such consent is required by applicable data protection legislation.