CHAPTER VIU.K. ROLE OF COMPETENT AUTHORITIES

Article 40U.K.Disclosure of information to third countries

[F1The FCA may transfer data and the analysis of data to a supervisory authority of another country where the transfer does not contravene Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data or the Data Protection Act 2018, but such transfer may only be made on a case-by-case basis.] The [F2FCA must] be satisfied that the transfer is necessary for the purposes of this Regulation. Any such transfer shall be made under agreement that the third country shall not transfer the data to the supervisory authority of another third country without the express written authorisation of the [F3FCA].

[F4The FCA shall disclose information which is confidential pursuant to Article 34 and which is received from a competent authority of a third country to a competent authority of another country only where the FCA has obtained the express agreement of the competent authority which transmitted the information and, where applicable, the information is disclosed solely for the purposes for which that competent authority gave its agreement.]