b. it is not prohibited by a statutory or contractual duty of confidentiality.
b. statutory duties of confidentiality or special data protection regulations so require.
2 The same penalties apply to anyone who without authorisation wilfully discloses confidential, sensitive personal data or personality profiles that have come to their knowledge in the course of their activities for a person bound by professional confidentiality or in the course of training with such a person.