Article 55Professional secrecy
1. Any confidential information received, exchanged or transmitted pursuant to this Regulation shall be subject to the conditions of professional secrecy laid down in paragraph 2.
2. The obligation of professional secrecy applies to all persons who work, or who have worked, for the competent authorities pursuant to this Regulation, or for any authority or market undertaking or natural or legal person to whom those competent authorities have delegated their powers, including auditors and experts contracted by them.
3. Information covered by professional secrecy, including the exchange of information among competent authorities under this Regulation and competent authorities designated or established in accordance with Directive (EU) 2022/2555, shall not be disclosed to any other person or authority except by virtue of provisions laid down by Union or national law;
4. All information exchanged between the competent authorities pursuant to this Regulation that concerns business or operational conditions and other economic or personal affairs shall be considered confidential and shall be subject to the requirements of professional secrecy, except where the competent authority states, at the time of communication, that such information may be disclosed or where such disclosure is necessary for legal proceedings.
DORA, the European Union regulation on digital operational resilience, Article 55
Professional secrecy over confidential information received, exchanged or transmitted under the Regulation. The obligation binds everyone who works or has worked for competent authorities, or for any authority, market undertaking or person to whom those authorities have delegated powers, including contracted auditors and experts.
Information covered by professional secrecy, including exchanges between competent authorities under this Regulation and the authorities designated under NIS2, must not be disclosed to any other person or authority except where Union or national law provides for it.
Information exchanged between competent authorities that concerns business or operational conditions and other economic or personal affairs is treated as confidential and subject to professional secrecy, unless the authority states when communicating it that it may be disclosed, or disclosure is necessary for legal proceedings.
Text: Regulation (EU) 2022/2554, as published in the Official Journal of the European Union, from EUR-Lex. Only the Official Journal text is authentic.