6. Obliged entities that participate in partnerships for information sharing shall define policies and procedures for the sharing of information in their internal policies and procedures established pursuant to Article 9. Such policies and procedures shall:
|
(a)
|
specify the assessment to be carried out to determine the extent of information to be shared, and where relevant for the nature of the information or the applicable judicial safeguards, provide for differentiated or limited access to information for members of the partnership;
|
|
(b)
|
describe the roles and responsibilities of the parties to the partnership for information-sharing;
|
|
(c)
|
identify the risk assessments that the obliged entity will take into account to determine situations of higher risk in which information can be shared.
|
The internal policies and procedures referred to in the first subparagraph shall be drawn up prior to the participation in a partnership for information sharing.