27.—(1) Information sent to, or acquired, in compliance or purported compliance with the obligations of the EU Control Regulation and the EU Implementing Regulation or as a result of enforcing these Regulations may be shared, in accordance with paragraph (2), where it has been so received by—
(a)the competent authority;
(b)an enforcement authority; or
(c)an authorised person.
(2) Where a body within paragraph (1) has received information in accordance with that paragraph, then such a body may share such information with any other—
(a)competent authority;
(b)enforcement authority; or
(c)authorised person,
appointed within the United Kingdom for the purposes of implementing or enforcing the EU Control Regulation and the EU Implementing Regulation.
(3) Information received in accordance with paragraph (2) must only be used for the purposes of enforcing these Regulations.
(4) For the purposes of this regulation, “an enforcement authority” includes the Food Standards Agency.