Member States shall provide that all persons who are working or who have worked for the supervisory authorities, as well as auditors and experts acting on behalf of those authorities, are bound by the obligation of professional secrecy.

Without prejudice to cases covered by criminal law, any confidential information received by such persons whilst performing their duties shall not be divulged to any person or authority whatsoever, except in summary or aggregate form, such that individual insurance and reinsurance undertakings cannot be identified.

However, where an insurance or reinsurance undertaking has been declared bankrupt or is being compulsorily wound up, confidential information which does not concern third parties involved in attempts to rescue that undertaking may be divulged in civil or commercial proceedings.

The first, second and third paragraphs of this Article shall not prevent the supervisory authorities from publishing the outcome of stress tests carried out in accordance with Article 34(4) of this Directive or Article 32 of Regulation (EU) No 1094/2010 or from transmitting the outcome of stress tests to EIOPA for the purposes of the publication by EIOPA of the results of Union-wide stress tests.