(a) Discretionary disclosure of confidential supervisory information to supervised financial institutions and their affiliates. The CFPB may, in its discretion, and to the extent consistent with applicable law, disclose confidential supervisory information concerning a supervised financial institution or its service providers to that supervised financial institution or to its affiliates.

(b) Disclosure of confidential supervisory information by a supervised financial institution or its affiliates. Unless directed otherwise by the Associate Director for Supervision, Enforcement, and Fair Lending or by his or her delegee:

(1) Any supervised financial institution lawfully in possession of confidential supervisory information of the CFPB pursuant to this section may disclose such information, or portions thereof, to its affiliates and to the following individuals to the extent that the disclosure of such confidential supervisory information is relevant to the performance of such individuals' assigned duties:

(i) The directors, officers, trustees, members, general partners, or employees of the supervised financial institution; and

(ii) The directors, officers, trustees, members, general partners, or employees of the affiliates of the supervised financial institution.

(2) Any supervised financial institution or affiliate thereof that is lawfully in possession of confidential supervisory information of the CFPB pursuant to this section may disclose such information, or portions thereof, to:

(i) Its certified public accountant, legal counsel, contractor, consultant, or service provider; or

(ii) Another person, with the prior written approval of the Associate Director for Supervision, Enforcement, and Fair Lending or his or her delegee.

(3) Where a supervised financial institution or its affiliate discloses confidential supervisory information pursuant to this paragraph (b) of this section:

(i) The recipient of such confidential supervisory information shall not, without the prior written approval of the Associate Director for Supervision, Enforcement, and Fair Lending or his or her delegee, utilize, make, or retain copies of, or disclose confidential supervisory information for any purpose, except as is necessary to provide advice or services to the supervised financial institution or its affiliate; and

(ii) The supervised financial institution or affiliate disclosing the confidential supervisory information shall take reasonable steps to ensure that the recipient complies with paragraph (b)(3)(i) of this section.