If a competent authority considers or has reason to believe that a device has caused damage , it shall , upon request , facilitate the provision of the information and documentation referred to in the first subparagraph to the potentially injured patient or user and , as appropriate , the patient 's or user 's successor in title , the patient 's or user 's health insurance company or other third parties affected by the damage caused to the patient or user , without prejudice to data protection rules and , unless there is an overriding public interest in disclosure , without prejudice to the protection of intellectual property rights .