Persons duly authorised by the Commission may be provided with access to the information referred to in Article 28(4) only to the extent necessary for the care, maintenance and development of the CCN/CSI network and the operation of the central register.

Such persons shall be subject to the obligation of official secrecy. The information accessed shall be protected as personal data under Regulation (EC) No 45/2001.