1. The provisions of Union law on the protection of EU classified information and Euratom classified information shall apply in respect of classified information that was obtained by the United Kingdom either before the end of the transition period or on the basis of this Agreement or that was obtained from the United Kingdom by the Union or a Member State either before the end of the transition period or on the basis of this Agreement.

2. The obligations resulting from Union law regarding industrial security shall apply to the United Kingdom in cases where the tendering, contracting or grant award procedure for the classified contract, classified subcontract or classified grant agreement was launched before the end of the transition period.

3. The United Kingdom shall ensure that cryptographic products that use classified cryptographic algorithms developed under the control of, and evaluated and approved by the Crypto Approval Authority of a Member State or of the United Kingdom, which have been approved by the Union by the end of the transition period and that are present in the United Kingdom, are not transferred to a third country.

4. Any requirements, limitations and conditions set out in the Union approval of cryptographic products shall apply to those products.