Commission Delegated Regulation (EU) 2021/1783

law://eu/reg/2021/1783@2026-11-12

Contents

THE EUROPEAN COMMISSION,Having regard to the Treaty on the Functioning of the European Union,Having regard to Regulation (EU) No 596/2014 of the European Parliament and of the Council of 16 April 2014 on market abuse (market abuse regulation) and repealing Directive 2003/6/EC of the European Parliament and of the Council and Commission Directives 2003/124/EC, 2003/125/EC and 2004/72/EC^note, and in particular the fourth subparagraph of Article 26(2) thereof,Whereas:

(1)Article 26(1) of Regulation (EU) No 596/2014 requires the competent authorities of Member States where necessary to conclude cooperation arrangements with supervisory authorities of third countries concerning the exchange of information and the enforcement of obligations arising under that Regulation in third countries. Cooperation arrangements on exchange of information can only be concluded if the information to be disclosed under them is subject to guarantees of professional secrecy at least equivalent to those set out in Article 27 of that Regulation, and such exchanges must be intended for the performance of the tasks of the competent authorities in question.

(2)The third subparagraph of Article 25(8) of Regulation (EU) No 596/2014 requires competent authorities where possible to conclude cooperation arrangements with third-country regulatory authorities responsible for related spot markets in accordance with Article 26 of that Regulation.

(3)In concluding new cooperation arrangements and updating existing cooperation arrangements with third-country authorities, the competent authorities where possible are to use the template document adopted pursuant to Article 26 of Regulation (EU) No 2014/596.

(4)In order to ensure a level of protection of personal data that is in line with Regulation (EU) 2016/679 of the European Parliament and of the Council^note, any transfer of personal data to third countries should be undertaken in full compliance with that regulation. One such way to exchange personal data between competent authorities and supervisory authorities of third countries is through administrative arrangements ensuring appropriate safeguards pursuant to Article 46(3) of by Regulation (EU) 2016/679, which include enforceable and effective rights that natural persons have over their personal data. For the transfer of personal data between European Economic Area (‘EEA’) financial supervisory authorities and non-EEA financial supervisory authorities, such an administrative arrangement has been drafted by the International Organization of Securities Commissions (IOSCO) and the European Securities and Markets Authority (ESMA)^note, and received the positive opinion of the European Data Protection Board (EDPB)^note. All EEA financial supervisory authorities and a number of non-EEA financial supervisory authorities have signed the ESMA-IOSCO administrative arrangement. In light of the broad institutional consensus around personal data safeguards provided in the ESMA-IOSCO administrative arrangement, it provides a model for future similar arrangements framing the transfer of personal data between competent authorities and supervisory authorities of third countries which are not parties to the ESMA-IOSCO Administrative Arrangement. However, authorities of Member States using the model ESMA-IOSCO Administrative Arrangement would still need to obtain authorisation by the data protection authority pursuant to Article 46(3) of Regulation (EU) 2016/679.

(5)This Regulation is based on the draft regulatory technical standards submitted by ESMA to the Commission.

(6)ESMA did not conduct open public consultations on the draft regulatory technical standards on which this Regulation is based, nor did it analyse the potential related costs and benefits of introducing such standards, as to have done so would have been disproportionate in relation to the scope and impact of those standards, taking into account the fact that the addressees of the standards would only be the competent authorities of the Member States and not market participants.

(7)ESMA has requested the opinion of the Securities and Markets Stakeholder Group established by Article 37 of Regulation (EU) No 1095/2010 of the European Parliament and of the Council^note,

HAS ADOPTED THIS REGULATION:

Article 1Cooperation arrangements#

The template document to be used by competent authorities of Member States where possible for cooperation arrangements pursuant to Article 26(1) or the third subparagraph of Article 25(8) of Regulation (EU) No 596/2014 is set out in the Annex to this Regulation.

Article 2Transfers of personal data#

Where competent authorities require appropriate safeguards for the transfer of personal data to supervisory authorities of third countries in the form of an administrative arrangement pursuant to Article 46(3) of Regulation (EU) 2016/679, that arrangement shall be annexed to and constitute a part of the cooperation arrangement entered into in accordance with Article 26 of Regulation (EU) No 596/2014.

Article 3Entry into force#

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

Template document for cooperation arrangements concerning the exchange of information between competent authorities of Member States and authorities in third countries and the enforcement of obligations arising under Regulation (EU) No 596/2014 in third countries

1. Introduction

Description of each signatory authority’s legal basis for the exchange of information in order for them to carry out their duties as regards to their laws and regulations relating to market abuse.

Declaration that pursuant to the laws and regulations that constitute the legal basis for exchange of information and to the cooperation arrangements, the signatory authorities can provide each other with mutual assistance on a reciprocal basis.

2. Definitions

An appropriate list of definitions covering the terms used in the arrangements.

3. Content of the assistance to be provided

(a)obtaining information held in the files of the signatory authority receiving the request

(b)obtaining statements or information from any person;

(c)obtaining documents from persons or entities including through the performance of on-site inspections;

(d)obtaining data traffic records, insofar as permitted by national law and, where applicable, with the assistance of the appropriate judicial authority depending on the implementation of Article 23(2)(h) of Regulation (EU) No 596/2014 or any equivalent power under the laws of the relevant third country;

(e)obtaining or assisting in obtaining the freezing or sequestration of assets in line with Article 23(2)(i) of Regulation (EU) No 596/2014 or any equivalent power under the laws of the relevant third country;

(f)obtaining or assisting in obtaining the temporary cessation of any practice contrary to the laws and regulations relating to market abuse in line with Article 23(2)(k) of Regulation (EU) No 596/2014 or any equivalent power under the laws of the relevant third country;

Description of the type of assistance to be provided in line with Article 23 of Regulation (EU) No 596/2014 of the European Parliament and of the Council^note such as:

4. General provisions – denial of assistance

(a)the request is not made in compliance with the arrangements;

(b)the request would require the signatory authority receiving the request to act in a manner that would violate domestic law;

(c)communication of the relevant information could adversely affect the security of the jurisdiction addressed, in particular the fight against terrorism or other serious crimes;

(d)complying with the request is likely to adversely affect the receiving authority’s own investigation, enforcement activities or, where applicable, a criminal investigation;

(e)judicial proceedings have already been initiated in respect of the same actions and against the same persons before the relevant authorities of the jurisdiction addressed;

(f)a final judgment has already been delivered in relation to the same persons for the same actions in the jurisdiction addressed.

List the cases in which cooperation requests may be denied such as:

Assistance will not be denied based on the fact that the type of conduct under investigation would not be a violation of the laws and regulations relating to market abuse of the authority receiving the request.

5. Sending and processing requests for assistance

Description of the procedure for sending and processing requests for assistance.

6. Permissible uses of information

Description of the rules on the permissible use of the information in line with Article 26(3) of the Regulation (EU) No 596/2014 and namely that the information provided must be intended for the performance of the tasks of the signatory authorities to ensure compliance with and enforce the laws and regulations relating to market abuse. The information exchanged shall be used solely for the purposes set forth in the request for assistance.

If a signatory authority making the request intends to use information furnished under the arrangement for any purpose other than those stated in this section, it must obtain the prior consent of the signatory authority receiving the request.

7. Confidentiality restrictions

(a)all information exchanged between the signatories under the arrangements that concerns business or operational conditions or other economic or personal affairs must be considered to be confidential and must be subject to the requirements of professional secrecy, except where the authority providing the information states at the time of communication that the information may be disclosed or such disclosure is necessary for legal proceedings;

(b)the obligation of professional secrecy applies to all persons who work or who have worked for the signatories or for any authority or market undertaking to whom either of the signatories has delegated its powers, including auditors and experts contracted by the signatory. Information covered by professional secrecy may not be disclosed to any other person or authority except by virtue of provisions laid down by Union law or national law, or by virtue of provisions laid down in the laws of the relevant third country at least equivalent to such provisions.

Description of the rules on confidentiality of any information disclosed, received, exchanged or transmitted. The description must include the following:

The information exchanged must not be disclosed to any other authority or entity except with the prior agreement of the signatory who originally provided it.

Commission Delegated Regulation (EU) 2021/1783

Commission Delegated Regulation (EU) 2021/1783

Article 1Cooperation arrangements#

Article 2Transfers of personal data#

Article 3Entry into force#

Template document for cooperation arrangements concerning the exchange of information between competent authorities of Member States and authorities in third countries and the enforcement of obligations arising under Regulation (EU) No 596/2014 in third countries

1. Introduction

2. Definitions

3. Content of the assistance to be provided

4. General provisions – denial of assistance

5. Sending and processing requests for assistance

6. Permissible uses of information

7. Confidentiality restrictions

8. General provisions – identification of a contact point

9. General provisions – revision clause

10. Other provisions – Miscellaneous

Key facts

Connections

History · 2 versions

Article 1Cooperation arrangements#

Article 2Transfers of personal data#

Article 3Entry into force#

Template document for cooperation arrangements concerning the exchange of information between competent authorities of Member States and authorities in third countries and the enforcement of obligations arising under Regulation (EU) No 596/2014 in third countries

1. Introduction

2. Definitions

3. Content of the assistance to be provided

4. General provisions – denial of assistance

5. Sending and processing requests for assistance

6. Permissible uses of information

7. Confidentiality restrictions

8. General provisions – identification of a contact point

9. General provisions – revision clause

10. Other provisions – Miscellaneous