1. Member States shall ensure that competent authorities and all persons who work or who have worked for those competent authorities, including the persons referred to in Article 76(1) of Directive 2014/65/EU, are bound by the obligation of professional secrecy for the purposes of this Directive and of Regulation (EU) 2019/2033.
Confidential information which such competent authorities and persons receive in the course of their duties may be disclosed only in summary or aggregate form, provided that individual investment firms or persons cannot be identified, without prejudice to cases covered by criminal law.
Where the investment firm has been declared bankrupt or is being compulsorily wound up, confidential information which does not concern third parties may be disclosed in civil or commercial proceedings, where such disclosure is necessary for carrying out those proceedings.
2. Competent authorities shall use the confidential information collected, exchanged or transmitted pursuant to this Directive and to Regulation (EU) 2019/2033 only for the purpose of carrying out their duties, and in particular for the following purposes:
|
(a) |
to monitor the prudential rules set out in this Directive and in Regulation (EU) 2019/2033; |
|
(b) |
to impose sanctions; |
|
(c) |
in administrative appeals against decisions of the competent authorities; |
|
(d) |
in court proceedings initiated under Article 23. |
3. Natural and legal persons and other bodies, other than competent authorities, that receive confidential information pursuant to this Directive and to Regulation (EU) 2019/2033 shall use that information only for the purposes for which the competent authority expressly provides or in accordance with national law.
4. Competent authorities may exchange confidential information for the purposes of paragraph 2, may expressly state how that information is to be treated and may expressly restrict any further transmission of that information.
5. The obligation referred to in paragraph 1 shall not prevent competent authorities from transmitting confidential information to the Commission when that information is necessary for the exercise of the powers of the Commission.
6. Competent authorities may provide EBA, ESMA, the ESRB, central banks of the Member States, the European System of Central Banks (ESCB) and the European Central Bank in their capacity as monetary authorities, and, where appropriate, public authorities responsible for overseeing payment and settlement systems, with confidential information where that information is necessary for the performance of their tasks.
(1) OJ C 378, 19.10.2018, p. 5.
(2) OJ C 262, 25.7.2018, p. 35.
(3) Position of the European Parliament of 16 April 2019 (not yet published in the Official Journal) and decision of the Council of 8 November 2019.
(4) Regulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and investment firms and amending Regulation (EU) No 648/2012 (OJ L 176, 27.6.2013, p. 1).
(5) Directive 2013/36/EU of the European Parliament and of the Council of 26 June 2013 on access to the activity of credit institutions and the prudential supervision of credit institutions and investment firms, amending Directive 2002/87/EC and repealing Directives 2006/48/EC and 2006/49/EC (OJ L 176, 27.6.2013, p. 338).
(6) Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments and amending Directive 2002/92/EC and Directive 2011/61/EU (OJ L 173, 12.6.2014, p. 349).
(7) Regulation (EU) No 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/78/EC (OJ L 331, 15.12.2010, p. 12).
(8) Regulation (EU) No 1095/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Securities and Markets Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/77/EC (OJ L 331, 15.12.2010, p. 84).
(9) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).
(10) Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39).
(11) Regulation (EU) 2019/2033 of the European Parliament and of the Council of 27 November 2019 on the prudential requirements of investment firms and amending Regulations (EU) No 1093/2010, (EU) No 575/2013, (EU) No 600/2014 and (EU) No 806/2014 (see page 1 of this Official Journal).
(12) Directive 2009/65/EC of the European Parliament and of the Council of 13 July 2009 on the coordination of laws, regulations and administrative provisions relating to undertakings for collective investment in transferable securities (UCITS) (OJ L 302, 17.11.2009, p. 32).
(13) Directive 2011/61/EU of the European Parliament and of the Council of 8 June 2011 on Alternative Investment Fund Managers and amending Directives 2003/41/EC and 2009/65/EC and Regulations (EC) No 1060/2009 and (EU) No 1095/2010 (OJ L 174, 1.7.2011, p. 1).
(14) Directive 2014/59/EU of the European Parliament and of the Council of 15 May 2014 establishing a framework for the recovery and resolution of credit institutions and investment firms and amending Council Directive 82/891/EEC, and Directives 2001/24/EC, 2002/47/EC, 2004/25/EC, 2005/56/EC, 2007/36/EC, 2011/35/EU, 2012/30/EU and 2013/36/EU, and Regulations (EU) No 1093/2010 and (EU) No 648/2012, of the European Parliament and of the Council (OJ L 173, 12.6.2014, p. 190).
(15) OJ L 123, 12.5.2016, p. 1.
(16) OJ C 369, 17.12.2011, p. 14.
(17) Directive 2013/34/EU of the European Parliament and of the Council of 26 June 2013 on the annual financial statements, consolidated financial statements and related reports of certain types of undertakings, amending Directive 2006/43/EC of the European Parliament and of the Council and repealing Council Directives 78/660/EEC and 83/349/EEC (OJ L 182, 29.6.2013, p. 19).
(18) Regulation (EC) No 1606/2002 of the European Parliament and of the Council of 19 July 2002 on the application of international accounting standards (OJ L 243, 11.9.2002, p. 1).
(19) Regulation (EU) No 600/2014 of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments and amending Regulation (EU) No 648/2012 (OJ L 173, 12.6.2014, p. 84).
(20) Directive (EU) 2019/878 of the European Parliament and of the Council of 20 May 2019 amending Directive 2013/36/EU as regards exempted entities, financial holding companies, mixed financial holding companies, remuneration, supervisory measures and powers and capital conservation measures (OJ L 150, 7.6.2019 p. 253).
(21) Directive 2002/87/EC of the European Parliament and of the Council of 16 December 2002 on the supplementary supervision of credit institutions, insurance undertakings and investment firms in a financial conglomerate and amending Council Directives 73/239/EEC, 79/267/EEC, 92/49/EEC, 92/96/EEC, 93/6/EEC and 93/22/EEC, and Directives 98/78/EC and 2000/12/EC of the European Parliament and of the Council (OJ L 35, 11.2.2003, p. 1).
(22) Regulation (EU) No 1092/2010 of the European Parliament and of the Council of 24 November 2010 on European Union macro-prudential oversight of the financial system and establishing a European Systemic Risk Board (OJ L 331, 15.12.2010, p. 1).
(23) Regulation (EU) No 648/2012 of the European Parliament and of the Council of 4 July 2012 on OTC derivatives, central counterparties and trade repositories (OJ L 201, 27.7.2012, p. 1).
(24) Directive 2006/43/EC of the European Parliament and of the Council of 17 May 2006 on statutory audits of annual accounts and consolidated accounts, amending Council Directives 78/660/EEC and 83/349/EEC and repealing Council Directive 84/253/EEC (OJ L 157, 9.6.2006, p. 87).
(25) Directive (EU) 2015/849 of the European Parliament and of the Council of 20 May 2015 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, amending Regulation (EU) No 648/2012 of the European Parliament and of the Council, and repealing Directive 2005/60/EC of the European Parliament and of the Council and Commission Directive 2006/70/EC (OJ L 141, 5.6.2015, p. 73).
(26) Commission Recommendation of 30 April 2009 on remuneration policies in the financial services sector (OJ L 120, 15.5.2009, p. 22).