1. Member States and the regulatory authorities shall, on request, provide the Commission with all the information necessary for the purposes of enforcing this Regulation.
The Commission shall set a reasonable time limit within which the information is to be provided, taking into account the complexity and urgency of the information required.
2. If the Member State or the regulatory authority concerned does not provide the information referred to in paragraph 1 within the time limit referred to in paragraph 1 the Commission may request all the information necessary for the purpose of enforcing this Regulation directly from the undertakings concerned.
When sending a request for information to an undertaking, the Commission shall, at the same time, forward a copy of the request to the regulatory authorities of the Member State in whose territory the seat of the undertaking is situated.
3. In its request for information under paragraph 1, the Commission shall state the legal basis of the request, the time limit within which the information is to be provided, the purpose of the request, and the penalties provided for in Article 66(2) for supplying incorrect, incomplete or misleading information.
4. The owners of the undertakings or their representatives and, in the case of legal persons, the natural persons authorised to represent the undertaking by law or by their instrument of incorporation, shall supply the information requested. Where lawyers are authorised to supply the information on behalf of their client, the client shall remain fully responsible in the event that the information supplied is incomplete, incorrect or misleading.
5. Where an undertaking does not provide the information requested within the time limit set by the Commission or supplies incomplete information, the Commission may by decision require the information to be provided. That decision shall specify what information is required and set an appropriate time limit within which it is to be supplied. It shall indicate the penalties provided for in Article 66(2). It shall also indicate the right to have the decision reviewed by the Court of Justice of the European Union.
The Commission shall, at the same time, send a copy of its decision to the regulatory authorities of the Member State within the territory of which the person is resident or the seat of the undertaking is situated.
6. The information referred to in paragraphs 1 and 2 shall be used only for the purposes of enforcing this Regulation.
The Commission shall not disclose information acquired pursuant to this Regulation where that information is covered by the obligation of professional secrecy.