5. For obliged entities referred to in Article 3, points (1), (2), (3)(a) and (b), in cases relating to the same transaction involving two or more obliged entities, and by way of derogation from paragraph 1 of this Article, disclosure may take place between the relevant obliged entities provided that they are located in the Union, or with entities in a third country which imposes requirements equivalent to those laid down in this Regulation, and that they are subject to professional secrecy and personal data protection requirements.