(1) Subject to the conditions in paragraph (2), the PRA or a PRA worker is permitted to disclose capital requirements directive information to an organisation specified in the first column of Part 6 of Schedule 1 for the purpose of enabling or assisting that organisation to discharge any of the functions listed beside it in the second column of Part 6 of Schedule 1.

(2) The conditions are as follows -

(a) the organisation must make an explicit request for the confidential information;

(b) the request is precise as to the nature, scope and format of the confidential information and the means of its disclosure or transmission;

(c) the confidential information requested is necessary for the performance of the specific tasks of the organisation making the request and does not go beyond the functions conferred on that organisation;

(d) the organisation making the request justifies it by reference to its tasks; and

(e) to the extent that the disclosure of confidential information involves processing of personal data, any processing of personal data by the organisation making the request complies with the UK GDPR.