IV.C.3. Confidentiality

Documents and information collected by the internal auditor should be treated with appropriate confidentiality and discretion, and also respect Directive 95/46/EC [Regulation (EC) No. 45/2001 for Community institutions and bodies] and national legislation on the protection of individuals with regard to the processing of personal data and on the free movement of such data.