1.1.The Provider shall maintain the confidentiality of all Personal Data and will not disclose Personal Data to third parties unless the Company specifically authorises the disclosure, or as required by law. If a court, regulator or Supervisory Authority requires the Provider to Process or disclose Personal Data, the Provider must first inform the Company and give the Company an opportunity to object or challenge the requirement, unless the law prohibits such notification.