Member States shall provide that all persons who are working or who have worked for the supervisory authorities, as well as auditors and experts acting on behalf of those authorities, are bound by the obligation of professional secrecy.
Without prejudice to cases covered by criminal law, any confidential information received by such persons whilst performing their duties shall not be divulged to any person or authority whatsoever, except in summary or aggregate form, such that individual insurance and reinsurance undertakings cannot be identified.
However, where an insurance or reinsurance undertaking has been declared bankrupt or is being compulsorily wound up, confidential information which does not concern third parties involved in attempts to rescue that undertaking may be divulged in civil or commercial proceedings.