27.2. The institution shall record any communication of information under section 27.1 in a register.
The register must contain, in particular,
(1) the nature and type of the information communicated;
(2) the names of the persons or bodies to whom the institution has given a mandate or a service contract and to whom information is communicated;
(3) the intended use of the information communicated; and
(4) the reasons justifying the communication of information.