2. Member States shall ensure that competent authorities and all persons who work or who have worked for competent authorities, as well as auditors and experts instructed by competent authorities, are bound by the obligation of professional secrecy. No confidential information which they may receive in the course of their duties may be divulged to any person or authority whatsoever, save in summary or aggregate form, without prejudice to cases covered by criminal law or by this Directive. This shall not, however, prevent competent authorities from exchanging or transmitting confidential information in accordance with Union and national law.