COMMISSION DELEGATED REGULATION (EU) 2021/1415

of 5 May 2021

supplementing Regulation (EU) 2017/2402 of the European Parliament and of the Council with regard to regulatory technical standards on the cooperation, exchange of information and notification obligations between competent authorities and ESMA, the EBA and EIOPA

(Text with EEA relevance)

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) 2017/2402 of the European Parliament and of the Council of 12 December 2017 laying down a general framework for securitisation and creating a specific framework for simple, transparent and standardised securitisation, and amending Directives 2009/65/EC, 2009/138/EC and 2011/61/EU and Regulations (EC) No 1060/2009 and (EU) No 648/2012 (1), and in particular the third subparagraph of Article 36(8) thereof,

Whereas:

(1) Article 36 of Regulation (EU) 2017/2402 requires the competent authorities referred to in Article 29 of Regulation (EU) 2017/2402 (the competent authorities) and the three European Supervisory Authorities (ESAs), namely the European Securities and Markets Authority (ESMA), the European Banking Authority (EBA) and the European Insurance and Occupational Pensions Authority (EIOPA), to cooperate closely with each other and exchange information in order to carry out their duties under Articles 30 to 34 of that Regulation. It also requires competent authorities who find that an entity has or may have infringed certain requirements of that Regulation to notify the entity’s competent authority of their findings, and, where the infringement concerns an incorrect or misleading notification pursuant to Article 27(1) of that Regulation, to notify the competent authority of the entity that has been designated as the first contact point to inform, in turn, the ESAs.

(2) The scope and nature of the cooperation, the exchange of information and the notifications required to take place under Article 36 of Regulation (EU) 2017/2402 should be sufficient to allow the competent authorities and the ESAs to discharge their supervisory, investigatory and sanctioning duties effectively. To this end, this Regulation sets out the minimum information which the competent authorities and the ESAs should exchange, including, where relevant, reports of their supervisory and enforcement activities.

(3) It is essential that, subject to national and Union law governing the protection of confidentiality of information and the processing of personal data, competent authorities and the ESAs are able to cooperate and exchange information throughout the entire process of their activities.

(4) In order to ensure that the cooperation and exchange of information under Article 36(1) of Regulation (EU) 2017/2402 takes place in an efficient and timely manner, it is appropriate to establish common procedures and forms to be used for the purposes of requesting cooperation or information and responding to such requests.

(5) A common procedure and form should also be used by competent authorities and the ESAs to transmit information on a voluntary basis when they consider that information in their possession may be of use to another competent authority or an ESA. For example, that could include information held by the competent authority of an institutional investor or third party authorised to assess whether a securitisation complies with the simple, transparent and standardised (STS) requirements, where that information may be of use to the competent authority of the originator, sponsor, securitisation special purpose entity or original lender.

(6) The common procedure and form to be used for voluntary exchanges of information should also be used for notifying findings of an infringement or suspected infringement under Article 36(4) and (5) of Regulation (EU) 2017/2402. This is in order to ensure the smooth and timely performance of the infringement notification duties under that Article.

(7) The competent authorities and the ESAs should be required to ensure the confidentiality of any request for cooperation or information, any information actually exchanged or notified, and any notification made, and to ensure compliance with the rules on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

(8) This Regulation is based on the draft regulatory technical standards submitted by ESMA to the Commission.

(9) ESMA did not conduct open public consultations on the draft regulatory standards on which this Regulation is based, nor did it analyse the potential costs and benefits, as this would have been highly disproportionate to the scope and impact of those standards, taking into account the fact that they principally concern competent authorities and the ESAs.

(10) ESMA has requested the opinion of the Securities and Markets Stakeholder Group established by Article 37 of Regulation (EU) No 1095/2010 of the European Parliament and of the Council (2),

HAS ADOPTED THIS REGULATION:

Article 1

Contact points

1. The competent authorities referred to in Article 29 of Regulation (EU) 2017/2402 (‘the competent authorities’) and the ESAs shall each designate contact points for the purposes of cooperating, exchanging information and making notifications pursuant to Article 36 of Regulation (EU) 2017/2402.

2. The competent authorities, the EBA and EIOPA shall communicate the details of the contact points designated by them to ESMA by 19 October 2021. They shall keep ESMA informed of any changes in those details.

3. ESMA shall maintain an up-to-date list of all contact points designated under this Article and update that list as necessary for use by the competent authorities, the EBA and EIOPA.

4. The most recent list referred to in paragraph 3 shall be used by the competent authorities and the ESAs for the purposes mentioned in paragraph 1.

Article 2

Means of communication

1. Except where otherwise stated in this Regulation, any forms to be used under this Regulation shall be transmitted in writing by post, fax or electronic means.

2. In determining the most appropriate means of communication in any particular case, due account shall be taken of confidentiality considerations, the time necessary for correspondence, the volume of material to be communicated, and ease of access to the information.

Article 3

Information to be exchanged

Upon a request made pursuant to Article 4, the competent authorities and the ESAs shall exchange at least the following information pursuant to Article 36(1) of Regulation (EU) 2017/2402:

(a) information on the arrangements, processes and mechanisms referred to in Article 30(2) of that Regulation;

(b) information on the risk management policies and procedures referred to in Article 30(3) of that Regulation;

(d) information and, to the extent available, reports or extracts of reports on any investigation or proceedings commenced with respect to the situations listed in Article 32(1) of that Regulation;

(e) information and, to the extent available, reports or extracts of reports on any criminal sanction, administrative sanction or remedial measure imposed or taken pursuant to Article 32 or 34 of that Regulation.

Article 4

Requests for cooperation or exchange of information

1. Requests for cooperation or exchange of information under Article 36(1) of Regulation (EU) 2017/2402 shall be made using the form set out in Annex I to this Regulation.

2. Where the requesting party believes that the request needs to be executed urgently, the request may be made orally provided that a request using the form set out in Annex I is subsequently transmitted without undue delay.

3. The requesting party shall specify the desired time period for reply and where appropriate indicate the urgency of the request.

4. Where the request for cooperation involves a request for information, the requesting party shall:

(a) specify, to the extent possible the details of the information sought, including the reasons why that information is considered to be relevant for the purposes of carrying out its duties under Articles 30 to 34 of Regulation (EU) 2017/2402;

(b) identify, where appropriate, any issue relating to the confidentiality of the information sought, including any special precaution for the collection of that information.

Article 5

Response to requests for cooperation or exchange of information

1. On receipt of a request made pursuant to Article 4, if the recipient party requires any clarification of the request, it shall seek that clarification from the requesting party as soon as possible using any means appropriate, whether oral or written. The requesting party shall provide the clarification promptly.

2. In responding to a request made pursuant to Article 4, the recipient of the request shall:

(a) use the form set out in Annex II to this Regulation;

(b) take reasonable steps within its powers to provide the cooperation or information requested;

(c) execute the request in a manner that will allow any necessary regulatory action to proceed in a timely manner, taking into account the complexity of the request and any need to involve another competent authority or an ESA.

Article 6

Unsolicited exchange of information

1. Where competent authorities or the ESAs provide unsolicited information, they shall use the form set out in Annex III to this Regulation.

2. Where the sending party believes that the unsolicited information should be transmitted urgently, the information may be communicated orally provided that it is subsequently transmitted without undue delay using the form in Annex III.

Article 7

Notification obligations

1. Notifications under Article 36(4) and (5) of Regulation (EU) 2017/2402 shall be made using the form set out in Annex III to this Regulation.

2. Where the notifying party believes that the information needs to be transmitted urgently, the notification may be made orally provided that a notification using the form set out in Annex III is subsequently transmitted without undue delay.

3. The notifying competent authority shall specify the factual elements, the nature, materiality and duration of the infringement found or suspected and provide any other relevant information which could be of assistance to the notified competent authority.

Article 8

Confidentiality and permissible use of information

1. The competent authorities and the ESAs, in accordance with the legal acts granting them the powers to be used for the purposes of carrying out their duties under Regulation (EU) 2017/2402, shall keep confidential the existence and content of any request for cooperation or information provided under Article 36 of that Regulation, of any response to such a request, and of any notification or other information provided under that Article.

2. The competent authorities and the ESAs, in accordance with the legal acts referred to in paragraph 1, shall use information provided to them pursuant to Article 36 of Regulation (EU) 2017/2402 for the purposes of carrying out their duties under that Regulation only.

Article 9

Entry into force

This Regulation shall enter into force on the twentieth day following its publication in the

Official Journal of the European Union

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 5 May 2021.

For the Commission

The President

Ursula VON DER LEYEN

(1)

OJ L 347, 28.12.2017, p. 35

(2) Regulation (EU) No 1095/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Securities and Markets Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/77/EC (

OJ L 331, 15.12.2010, p. 84

ANNEX I

Form for a request for cooperation and exchange of information

Request for cooperation and exchange of information

[Bild bitte in Originalquelle ansehen]

ANNEX II

Form for the reply to a request for cooperation and exchange of information

Reply to a request for cooperation and exchange of information

[Bild bitte in Originalquelle ansehen]

ANNEX III

Form for the provision of unsolicited information and notification of infringement(s) or suspected infringement(s)

Provision of unsolicited information or notification of infringement(s) or suspected infringement(s)

[Bild bitte in Originalquelle ansehen]