Article 102

Unless otherwise provided for in this Regulation and without prejudice to existing national provisions and practices in the Member States on confidentiality, all parties involved in the application of this Regulation shall respect the confidentiality of information and data obtained in carrying out their tasks in order to protect the following:

1. (a)

   personal data in accordance with Article 103;

2. (b)

   commercially confidential information and trade secrets of a natural or legal person, including intellectual property rights unless disclosure is in the public interest;

3. (c)

   the effective implementation of this Regulation, in particular for the purpose of inspections, investigations or audits.

Without prejudice to paragraph 1, information exchanged on a confidential basis between competent authorities and between competent authorities and the Commission shall not be disclosed without the prior agreement of the originating authority.

Paragraphs 1 and 2 shall not affect the rights and obligations of the Commission, Member States and notified bodies with regard to exchange of information and the dissemination of warnings, nor the obligations of the persons concerned to provide information under criminal law.

The Commission and Member States may exchange confidential information with regulatory authorities of third countries with which they have concluded bilateral or multilateral confidentiality arrangements.