Each Member State may, in addition, appoint one or more IMI coordinators in order to carry out any of the tasks listed in paragraph 1, in accordance with its internal administrative structure.

Member States shall inform the Commission of the IMI coordinators appointed in accordance with paragraphs 1 and 2 and of the tasks for which they are responsible. The Commission shall share that information with the other Member States.

All IMI coordinators may act as competent authorities. In such cases an IMI coordinator shall have the same access rights as a competent authority. Each IMI coordinator shall be a controller with respect to its own data processing activities as an IMI actor.

When cooperating by means of IMI, competent authorities, acting through IMI users in accordance with administrative cooperation procedures, shall ensure that, in accordance with the applicable Union act, an adequate response is provided within the shortest possible period of time, and in any event within the deadline set by that act.

A competent authority may invoke as evidence any information, document, finding, statement or certified true copy which it has received electronically by means of IMI, on the same basis as similar information obtained in its own country, for purposes compatible with the purposes for which the data were originally collected.

Each competent authority shall be a controller with respect to its own data processing activities performed by an IMI user under its authority and shall ensure that data subjects can exercise their rights in accordance with Chapters III and IV, where necessary, in cooperation with the Commission.

For the purposes of performing the tasks listed in paragraph 1 and producing statistical reports, the Commission shall have access to the necessary information relating to the processing operations performed in IMI.

The Commission shall not participate in administrative cooperation procedures involving the processing of personal data except where required by a provision of a Union act listed in the Annex.

Only IMI users shall have access to IMI.

Member States shall designate the IMI coordinators and competent authorities and the internal market areas in which they have competence. The Commission may play a consultative role in that process.

Each IMI actor shall grant and revoke, as necessary, appropriate access rights to its IMI users in the internal market area for which it is competent.

Appropriate means shall be put in place by the Commission and the Member States to ensure that IMI users are allowed to access personal data processed in IMI only on a need-to-know basis and within the internal market area or areas for which they were granted access rights in accordance with paragraph 3.

The use of personal data processed in IMI for a specific purpose in a way that is incompatible with that original purpose shall be prohibited, unless explicitly provided for by national law in accordance with Union law.

Where an administrative cooperation procedure involves the processing of personal data, only the IMI actors participating in that procedure shall have access to such personal data.

Each Member State shall apply its rules of professional secrecy or other equivalent duties of confidentiality to its IMI actors and IMI users, in accordance with national or Union legislation.

IMI actors shall ensure that requests of other IMI actors for confidential treatment of information exchanged by means of IMI are respected by IMI users working under their authority.