(1)

Markets in crypto-assets are inherently cross-border markets. It is therefore necessary to ensure that competent authorities in different Member States can exchange information that enables them to effectively supervise entities operating in their respective jurisdictions.

(2)

The information to be exchanged by competent authorities pursuant to Article 95(1) of Regulation (EU) 2023/1114 should therefore allow those authorities to effectively carry out their investigation, supervision and enforcement actitivites under that Regulation. Consequently, it is necessary to specify the information that competent authorities may need to exchange to be able to perform those tasks.

(3)

To ensure that competent authorities can effectively monitor the issuance and offer to the public of crypto-assets other than asset-referenced tokens and e-money tokens, competent authorities should exchange information relating not only to the crypto-assets themselves, including their technical characteristics and categorisation, but also to the offer of the crypto-assets, the issuers and offerors of the crypto-assets and the persons seeking admission to trading of crypto-assets. In particular, competent authorities should exchange general information and documents allowing the identification of the relevant persons and the understanding of the crypto-asset issuance and offering, including notified crypto-asset white papers, as well as information related to identified breaches, penalties and measures, enforcement actions and relevant compliance and conduct history.

(4)

Similarly, to ensure that competent authorities can effectively supervise the issuance of asset-referenced tokens, competent authorities should exchange information relating to the technical characteristics of such tokens. In addition, they should exchange information necessary to ensure that asset-referenced tokens are only issued by authorised persons, and offered by the issuer or by a person authorised by the issuer. Furthermore, in order to assess whether an issuer of asset-referenced tokens complies with Title III of Regulation (EU) 2023/1114, competent authorities should exchange information and documents on the prudential requirements and governance arrangements of the issuer, including its management body, its suitability and its shareholders as well as any imposed administrative penalties and measures, enforcement actions and information on the issuer’s relevant compliance and conduct history.

(5)

Competent authorities should, in order to be able to effectively monitor the issuance of e-money tokens, exchange information relating to the technical characteristics of such tokens. Furthermore, competent authorities should exchange information to ensure that e-money tokens are issued by entities referred to in Article 48(1) of Regulation (EU) 2023/1114, to ensure that such issuers comply with the relevant requirements in Title IV of that Regulation, and to exchange information on any imposed penalties and measures, enforcement actions and information on the issuers’ relevant compliance and conduct history.

(6)

To ensure effective monitoring of crypto-asset service providers, competent authorities should exchange general information, constituting documents and other documents that provide insight into the structure and operational activities of such providers. For the same reason, competent authorities should also exchange information about the authorisation process and the subsequent compliance with Title V of Regulation (EU) 2023/1114. This information should include information on the management body of crypto-asset service providers, its suitability to manage such providers, and the reputation of its members, as well as information about shareholders, imposed penalties and measures, enforcement actions and information of the providers’ relevant compliance and conduct history.

(7)

Competent authorities should also exchange relevant information on suspicions of market abuse in order to discharge their supervisory duties in a comprehensive manner.

(8)

Finally, competent authorities should exchange information regarding any suspicions of irregularities in the activities of natural and legal persons falling within the scope of Regulation (EU) 2023/1114, as well as details of any risks such irregularities could pose to investor protection or financial stability.

(9)

The exchange of information between competent authorities in relation to investigation, supervision and enforcement activities should be carried out in compliance with the right to protection of personal data of the persons concerned, as set out in Articles 7 and 8, respectively, of the Charter of Fundamental Rights of the European Union and must comply with Regulation (EU) 2016/679 of the European Parliament and of the Council (2). It follows that only personal data that are necessary for the purpose of investigation, supervision and enforcement activities under Regulation (EU) 2023/1114 are exchanged and that those data are not kept longer than necessary for that purpose.

(10)

This Regulation is based on the draft regulatory technical standards drafted by the European Securities and Markets Authority (ESMA) in close cooperation with the European Banking Authority and submitted to the Commission.

(11)

ESMA has requested the advice of the Securities and Markets Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1095/2010 of the European Parliament and of the Council (3).

(12)

ESMA has not conducted open public consultations on the draft regulatory technical standards on which this Regulation is based, nor has it analysed the potential related costs and benefits of introducing such standards, as that would have been highly disproportionate in relation to the scope and impact of those standards, taking into account that this Regulation only affects competent authorities and not market participants.

(13)

The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (4) and delivered an opinion on 27 May 2024,

(a)

general information and documents received in the context of the notification of an intended offer to the public or admission to trading, and, where relevant supplemented thereafter in the framework of supervision, including:

(b)

information on any penalty, including criminal penalties, administrative measures or enforcement actions, in relation to persons referred to in point (a)(i);

(c)

any other information necessary for cooperation among competent authorities in investigation, supervision and enforcement activities, pursuant to Article 95(1) of Regulation (EU) 2023/1114.

(a)

general information and documents received in the context of the application for authorisation as an issuer of asset-referenced tokens pursuant to Commission Delegated Regulation establishing technical standards adopted pursuant to Article 18(6) of Regulation (EU) 2023/1114 or of the notification pursuant to Commission Delegated Regulation (EU) 2025/296 (6), and where relevant supplemented thereafter in the framework of supervision, including:

(b)

information about the authorisation as an issuer of asset-referenced tokens, including where the authorisation was refused or the application for authorisation was retracted, and information about the withdrawal of an authorisation pursuant to Article 24 of Regulation (EU) 2023/1114;

(c)

the plan of the issuer of asset-referenced tokens to discontinue the provision of services and activities as approved pursuant to Article 34(7) of Regulation (EU) 2023/1114;

(d)

information on the loss by the third-party entity referred to in Article 34(5), point (h) of Regulation (EU) 2023/1114 of its authorisation as a credit institution, as a crypto-asset service provider, as a payment institution, or as an electronic money institution;

(e)

information on any temporary suspensions by a competent authority of the redemption of asset-referenced tokens and an identification of the circumstances that might affect the interests of the holders of asset-referenced tokens and financial stability pursuant to Article 46(4) of Regulation (EU) 2023/1114;

(f)

information on any infringements of the national provisions transposing Directive (EU) 2015/849 of the European Parliament and of the Council (8) by the members of the management body of the issuer of asset-referenced tokens or by shareholders or members, whether direct or indirect, that have qualifying holdings in the issuer of asset-referenced tokens;

(g)

information on any penalty issued pursuant to Regulation (EU) 2023/1114, including criminal penalties, administrative measures or enforcement actions, in relation to an issuer of an asset-referenced token;

(h)

any other information necessary for cooperation among competent authorities in investigation, supervision and enforcement activities pursuant to Article 95(1) of Regulation (EU) 2023/1114.

(a)

information and documents received in the context of the notification by an issuer of e-money tokens pursuant to Article 48 of Regulation (EU) 2023/1114 and, where relevant, supplemented thereafter in the framework of supervision, including:

(b)

information on any temporary suspensions by a competent authority of the redemption of e-money tokens and an identification of the circumstances that might affect the interests of the holders of e-money tokens and financial stability, pursuant to Article 55 of Regulation (EU) 2023/1114;

(c)

information on any penalty issued pursuant to Regulation (EU) 2023/1114, including criminal penalties, administrative measures or enforcement actions, in relation to an issuer of e-money tokens;

(d)

any other information necessary for cooperation among competent authorities in investigation, supervision and enforcement activities pursuant to Article 95(1) of Regulation (EU) 2023/1114.

(a)

information and documents received in the context of the application for authorisation as a crypto-asset service provider pursuant to Commission Delegated Regulation (EU) 2025/305 (11) or of the notification pursuant to Commission Delegated Regulation (EU) 2025/303 (12), and where relevant supplemented thereafter in the framework of supervision, including:

(b)

information relating to the records kept by crypto-asset service providers in accordance with Articles 68(9) and 76(15) of Regulation (EU) 2023/1114;

(c)

information about the authorisation as a crypto-asset service provider, including where the authorisation was refused or the application for authorisation was retracted, and information on any withdrawal of the authorisation pursuant to Article 64 of Regulation (EU) 2023/1114;

(d)

information on any penalty issued pursuant to Regulation (EU) 2023/1114, including criminal penalties, administrative measures or enforcement actions in relation to a crypto-asset service provider;

(e)

any other information necessary for cooperation among competent authorities in investigation, supervision and enforcement activities pursuant to Article 95(1) of Regulation (EU) 2023/1114.

(a)

records of crypto-asset services, activities, orders and transactions undertaken by crypto-asset service providers kept pursuant to Article 68(9) of Regulation (EU) 2023/1114;

(b)

data relating to all orders in crypto-assets advertised through the systems of a crypto-asset service provider operating a trading platform kept pursuant to Article 76(15) of Regulation (EU) 2023/1114;

(c)

reports of suspicious orders or transactions as referred to in Article 92(1) of Regulation (EU) 2023/1114;

(d)

any relevant indications or evidence supporting such suspicions;

(e)

any other information necessary for cooperating in investigation, supervision and enforcement activities relating to Title VI of Regulation (EU) 2023/1114.

(a)

information on any suspicions of irregularities in the activities of an offeror or person seeking admission to trading of crypto-assets other than asset-referenced tokens or e-money tokens, an issuer of an asset referenced token or e-money token, or a crypto-asset service provider;

(b)

information on any precautionary measures planned or taken in accordance with Article 102(2) of Regulation (EU) 2023/1114;

(c)

any other information necessary for cooperating in the adoption of precautionary measures.