Confidential information received by the Autorité de contrôle prudentiel et de résolution from an authority or person in another Member State of the European Union or another State party to the Agreement on the European Economic Area or from a third country may not be disclosed without the express agreement of the authority or person that provided the information and, where applicable, solely for the purposes for which that authority or person gave its agreement.
By way of derogation from the first paragraph, in the case of confidential information relating to the fight against money laundering and terrorist financing communicated by an authority or person under the authority of another Member State of the European Union or another State party to the Agreement on the European Economic Area, the express agreement of this authority or person is only required when the Autorité de contrôle prudentiel et de résolution intends to transmit this information:
1° To counterpart authorities established in States that are neither members of the European Union nor parties to the Agreement on the European Economic Area ;
2° To the authorities, departments and persons mentioned in II of Article L. 612-17 when the information relates to a credit institution.