7.—(1) A designated credit reference agency must provide information received under regulation 3 or by virtue of regulation 6 to the Bank of England on request.
(2) The Bank of England must provide information received from a designated credit reference agency pursuant to paragraph (1) to the Treasury on request, but such information must be so framed that it is not possible to ascertain from it information relating to a particular small or medium sized business.
(3) The Bank of England may otherwise provide information received from a designated credit reference agency pursuant to paragraph (1) only where such disclosure is—
(a)to the PRA for the purpose of enabling or assisting the PRA to discharge any of the PRA’s public functions; or
(b)to any other person where—
(i)such information has already lawfully been made available to the public;
(ii)such information is in the form of a summary or collection of information so framed that it is not possible to ascertain from it information relating to a particular person;
(iii)the person to whom the information relates has provided consent for such disclosure;
(iv)such disclosure is for the purposes of any criminal investigation or criminal proceedings whether in the United Kingdom or elsewhere;
(v)such disclosure is for the institution of, or otherwise for the purposes of, any proceedings arising by virtue of these Regulations or under the 2000 Act or any proceedings to which the Bank of England is, or is proposed to be, a party; or
(vi)such disclosure is in pursuance of an EU obligation.
(4) Where the Bank of England has provided information under sub-paragraph (3)(a) the PRA may only disclose the same information to any other person—
(a)if the Bank of England consents; and
(b)where any of the circumstances in sub-paragraph (3)(b) apply.
(5) For the purposes of paragraph (4)(b), the reference to the Bank of England in sub-paragraph (3)(b) is to be read as reference to the PRA.