Confidential information received by the Autorité de contrôle prudentiel et de résolution, the Banque de France and the Autorité des marchés financiers from a European supervisory authority, the European Systemic Risk Board, an authority within a Member State of the European Union or a State party to the Agreement on the European Economic Area or from a third country may not be disclosed without the express agreement of the authority or committee that provided the information and, where applicable, solely for the purposes for which its agreement was given.