‘The intention of the directive is not to compel companies to share commercially sensitive information’