Back to EUR-Lex homepage

EUR-Lex Access to European Union law

Back to EUR-Lex homepage

This document is an excerpt from the EUR-Lex website

Use quotation marks to search for an "exact phrase". Append an asterisk (*) to a search term to find variations of it (transp*, 32019R*). Use a question mark (?) instead of a single character in your search term to find variations of it (ca?e finds case, cane, care).
Search tips
Need more search options? Use the Advanced search
You are here

Document 52012XX1106(04)

Executive summary of the Opinion of the European Data Protection Supervisor on the Commission proposal for a regulation of the European Parliament and of the Council on improving securities settlement in the European Union and on central securities depositories (CSDs) and amending Directive 98/26/EC

OJ C 336, 6.11.2012, p. 13–14 (BG, ES, CS, DA, DE, ET, EL, EN, FR, IT, LV, LT, HU, MT, NL, PL, PT, RO, SK, SL, FI, SV)

6.11.2012   

EN

Official Journal of the European Union

C 336/13

Executive summary of the Opinion of the European Data Protection Supervisor on the Commission proposal for a regulation of the European Parliament and of the Council on improving securities settlement in the European Union and on central securities depositories (CSDs) and amending Directive 98/26/EC

(The full text of this Opinion can be found in English, French and German on the EDPS website: http://www.edps.europa.eu)

2012/C 336/07

1.   Introduction

1.1.   Consultation of the EDPS

1.

On 7 March 2012, the Commission adopted a proposal for a regulation of the European Parliament and of the Council on improving securities settlement in the European Union and on central securities depositories (CSDs) and amending Directive 98/26/EC (‘the proposal’). This proposal was sent to the EDPS for consultation on the same day.

2.

The EDPS welcomes the fact that he is consulted by the Commission and recommends that references to this Opinion are included in the preambles of the proposed regulation.

3.

The proposal contains provisions which may in certain cases have data protection implications for the individuals concerned such as the investigative powers of the competent authorities, the exchange of information, the keeping of records, the outsourcing of activities, the publication of sanctions and the reporting of breaches.

4.

There are comparable provisions to the ones referred to in this Opinion in several pending and possible future proposals, such as those discussed in the EDPS Opinions on the European Venture Capital Funds and the European Social Entrepreneurship Funds (1), the legislative package on the revision of the banking legislation, credit rating agencies, markets in financial instruments (MiFID/MiFIR) and market abuse (2). Therefore, the EDPS recommends reading this Opinion in close conjunction with his Opinions on the abovementioned initiatives.

1.2.   Objectives and scope of the proposal

5.

Any trade in securities on or off a trading venue is followed by a post-trade flow of processes, leading to the settlement of the trade, which means the delivery of securities to the buyer against the delivery of cash to the seller. CSDs are key institutions that enable settlement by operating so-called securities settlement systems. They are the institutions which facilitate the transactions concluded on the markets. CSDs also ensure the initial recording and the central maintenance of securities accounts that record how many securities have been issued by whom and each change in the holding of those securities.

6.

While generally safe and efficient within national borders, CSDs combine and communicate less safely across borders, which means that an investor faces higher risks and costs when making a cross-border investment. The absence of an efficient single internal market for settlements also raises other important concerns such as the limitation of security issuers' access to CSDs, different national licensing regimes and rules for CSDs across the EU, and limited competition between different national CSDs. These barriers result in a very fragmented market while cross-border transactions in Europe continue to increase and CSDs become increasingly interconnected.

7.

The proposal aims at addressing these problems by introducing an obligation to represent all transferable securities in book entry form and to record these in CSDs before trading them on regulated venues, harmonising settlement periods and settlement discipline regimes across the EU, and introducing a common set of rules addressing the risks of CSDs' operations and services.

8.

The proposal will complete the regulatory framework for securities market infrastructures, alongside the Directive 2004/39/EC on markets in financial instruments (MiFID) for trading venues, and the proposal for a regulation on derivative transactions (EMIR) for central counterparties.

3.   Conclusions

48.

The EDPS welcomes the attention specifically paid to data protection in the proposal.

49.

The EDPS makes the following recommendations:

—

include references to this Opinion in the preamble of the proposal,

—

rephrase provisions emphasising the full applicability of existing data protection legislation in one general provision referring to Directive 95/46/EC as well as Regulation (EC) No 45/2001 and clarify the reference to Directive 95/46/EC by specifying that the provisions will apply in accordance with the national rules which implement Directive 95/46/EC. The EDPS furthermore recommends including this type of overarching provision in a substantive provision of the proposal,

—

limit competent authorities’ access to documents and information to specifically identified and serious violations of the proposal and in cases where a reasonable suspicion (which should be supported by concrete initial evidence) exists that a breach has been committed,

—

introduce a requirement for competent authorities to request documents and information by formal decision, specifying the legal basis and the purpose of the request and what information is required, the time limit within which the information is to be provided as well as the right of the addressee to have the decision reviewed by a court of law,

—

specify the kind of personal information that can be processed and transferred under the proposal, define the purposes for which personal data can be processed and transferred by competent authorities and fix a proportionate data retention period for the above processing or at least introduce precise criteria for its establishment,

—

in view of the risks concerned regarding transfers of data to third countries, add in Article 23.7 specific safeguards such as for example a case-by-case assessment and the existence of an adequate level of protection of personal data in the third country receiving the personal data,

—

replace the minimum retention period of five years in Article 27 of the proposal with a maximum retention period when records contain personal data. The chosen period should be necessary and proportionate for the purpose for which data are processed,

—

rephrase Article 28.1(i) as follows: ‘The CSD ensures that the service provider provides its services in full compliance with the national rules, applicable to the CSD, implementing Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data. The CSD is responsible (…)’,

—

add in Article 62.2(b) a provision saying that: ‘the identity of these persons should be guaranteed at all stages of the procedure, unless its disclosure is required by national law in the context of further investigation or subsequent judicial proceedings’ and remove in Article 62.2(c) ‘the principles laid down in’,

—

in light of the doubts expressed in the present Opinion, assess the necessity and proportionality of the proposed system of mandatory publication of sanctions. Subject to the outcome of the necessity and proportionality test, in any event provide for adequate safeguards to ensure respect of the presumption of innocence, the right of the persons concerned to object, the security/accuracy of the data and their deletion after an adequate period of time.

Done at Brussels, 9 July 2012.

Giovanni BUTTARELLI

Assistant European Data Protection Supervisor

(1)  EDPS Opinion of 14 June 2012, available at: http://www.edps.europa.eu

(2)  EDPS Opinions of 10 February 2012, available at: http://www.edps.europa.eu

Top