COMMISSION DELEGATED REGULATION (EU) 2019/359

of 13 December 2018

supplementing Regulation (EU) 2015/2365 of the European Parliament and of the Council with regard to regulatory technical standards specifying the details of the application for registration and extension of registration as a trade repository

(Text with EEA relevance)

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) 2015/2365 of the European Parliament and of the Council of 25 November 2015 on transparency of securities financing transactions and of reuse and amending Regulation (EU) No 648/2012 (1), and in particular Article 5(7) thereof,

Whereas:

(1) Rules should be laid down specifying the information to be provided to the European Securities and Markets Authority (ESMA) as part of an application for registration or extension of registration as a trade repository.

(2) Establishing a comprehensive and sound framework for registration and extension of registration of trade repositories is essential for the achievement of the objectives of Regulation (EU) 2015/2365 and for the efficient provision of repository functions.

(3) The rules and standards for the registration and the extension of registration of trade repositories for the purposes of Regulation (EU) No 2365/2015 should build on pre-existing infrastructures, operational processes and formats which were introduced with regard to reporting derivative contracts to trade repositories, in order to minimise additional operational costs for market participants.

(4) Experience in applying the provisions of Commission Delegated Regulation (EU) No 150/2013 (2) supplementing Regulation (EU) No 648/2012 of the European Parliament and of the Council on OTC derivatives, central counterparties and trade repositories with regard to regulatory technical standards specifying the details of the application for registration as a trade repository has proved that the provisions for registration of trade repositories under Regulation (EU) No 648/2012 constitute a sound basis to build the framework for registration of trade repositories under Regulation (EU) 2015/2365. In order to further strengthen that framework, this Regulation should reflect the evolving nature of the industry.

(5) Any application for registration as a trade repository should contain information on the structure of its internal controls and the independence of its governing bodies, in order to enable ESMA to assess whether the corporate governance structure ensures the independence of the trade repository and whether that structure and its reporting routines are sufficient to ensure compliance with the requirements for trade repositories set out in Regulation (EU) 2015/2365. Detailed information on the relevant internal control mechanisms and structures, the internal audit function as well as the audit work plan should be included in the application for registration in order to enable ESMA to assess the way in which those factors contribute to the efficient functioning of the trade repository.

(6) Although trade repositories which operate through branches are not considered separate legal persons, separate information on branches should be provided in order to enable ESMA to clearly identify the position of the branches in the organisational structure of the trade repository, assess the fitness for duty and appropriateness of the senior management of the branches, and evaluate whether the control mechanisms, compliance and other functions in place are robust enough to identify, evaluate and manage the branches' risks in an effective manner.

(7) For the purpose of enabling ESMA to assess the good repute, experience and skills of the prospective trade repository's board members and senior management, an applicant trade repository should provide relevant information on those persons such as the curricula vitae, details regarding any criminal convictions, self-declarations of good repute and declarations of any potential conflicts of interests.

(8) Any application for registration should contain information which demonstrates that the applicant has the necessary financial resources at its disposal for the performance of its functions as a trade repository on an on-going basis and effective business continuity arrangements.

(9) Article 5(2) of Regulation (EU) 2015/2365 requires trade repositories to verify the completeness and correctness of data reported under Article 4 thereof. In order to be registered or be granted an extension of registration under Regulation (EU) 2015/2365, trade repositories should demonstrate that they have established systems and procedures which ensure their ability to verify the completeness and correctness of the details of the securities financing transactions (SFTs).

(10) The use of common resources within a trade repository between SFT reporting services on the one hand and ancillary services or derivative reporting services on the other may lead to contagion of operational risks across services. Whereas the validation, reconciliation, processing and recordkeeping of data may require an effective operational separation to avoid such contagion of risks, practices such as a common front-end of systems, a common access point to data for authorities or the use of the same staff working in sales, compliance, or a client services helpdesk may be less prone to contagion and hence do not necessarily require operational separation. Trade repositories should therefore establish an appropriate level of operational separation between the resources, systems or procedures used in different business lines, including where those business lines comprise the provision of services subject to other Union or third country legislation, and ensure that detailed and clear information on the ancillary services, or other business lines that the trade repository offers outside its core activity of repository services under Regulation (EU) 2015/2365, is provided to ESMA in the application for registration or extension of registration.

(11) The soundness, resilience and protection of the information technology systems of trade repositories are essential to ensure compliance with the objectives of Regulation (EU) 2015/2365. Accordingly, trade repositories should provide comprehensive and detailed information on those systems to allow ESMA to assess the soundness and resilience of their information technology systems. Where the provision of repository functions is outsourced to third parties, either at the level of the group or outside the group, the trade repository should provide detailed information on the relevant outsourcing arrangements to allow the assessment of compliance with the conditions for registration, including information on any service level agreements, on metrics and on how those metrics are effectively monitored. Finally, information should be provided by trade repositories on the mechanisms and controls that they put in place to effectively manage potential cyber-risks and to protect the data they maintain from cyber-attacks.

(12) Different types of users can report, access or modify the data maintained by the trade repository. The characteristics, as well as the rights and obligations of the different types of users should be clearly defined by the trade repository and should be provided as part of the application for registration. The information provided by the trade repositories should also clearly identify the different categories of access available. To ensure the confidentiality of data, but also its availability to third parties, a trade repository should provide information about how it ensures that only the data for which the relevant counterparties have provided their explicit, revocable and discretionary consent is made available to third parties. Finally, the trade repository should provide information in its application on the channels and mechanisms used to publicly disclose information on its access rules in order to ensure an informed decision by its service users.

(13) The fees associated with the services provided by trade repositories are essential information for enabling market participants to make an informed choice and should therefore form part of the application for registration as a trade repository.

(14) Given that market participants and authorities rely on the data maintained by trade repositories, strict and effective operational and record-keeping arrangements should be clearly described in a trade repository's application for registration. To demonstrate how the confidentiality and protection of data maintained by the trade repository is preserved as well as to allow for its traceability, a specific reference regarding the set-up of a reporting log needs to be included in the application for registration.

(15) To achieve the objectives of Regulation (EU) 2015/2365 regarding the transparency of SFTs, trade repositories should demonstrate that they apply the procedure for terms and conditions of access in accordance with Commission Delegated Regulation (EU) 2019/357 (3), that the integrity of the data provided to authorities is ensured and that they are in a position to provide access to the data in accordance with the relevant requirements included in Commission Delegated Regulation (EU) 2019/358 (4).

(16) The effective payment of the registration fees by trade repositories at the time of application is essential to cover ESMA's necessary expenditure relating to the registration or extension of registration of a trade repository.

(17) A simplified application procedure for the extension of registration should be established to allow those trade repositories already registered under Regulation (EU) No 648/2012 to have that registration extended under Regulation (EU) 2015/2365. To avoid any duplicate requirements, the information to be provided by the trade repository as part of an extension of registration should include detailed information on the adaptations necessary to ensure it complies with the requirements under Regulation (EU) 2015/2365.

(18) This Regulation is based on the draft regulatory technical standards submitted by the European Securities and Markets Authority to the European Commission pursuant to the procedure in Article 10 of Regulation (EU) No 1095/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Securities and Markets Authority) (5).

(19) ESMA has conducted open public consultations on these draft regulatory technical standards, analysed the potential related costs and benefits and requested the opinion of the Securities and Markets Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1095/2010,

HAS ADOPTED THIS REGULATION:

Article 1

Identification, legal status and types of securities financing transactions

1. For the purposes of Article 5(5)(a) of Regulation (EU) 2015/2365, the application for registration as a trade repository shall contain the following information:

(a) the corporate name of the applicant and legal address within the Union;

(b) an excerpt from the relevant commercial or court register, or other forms of certified evidence of the place of incorporation and scope of business activity of the applicant, valid at the application date;

(d) information on whether the applicant is authorised or registered by a competent authority in the Member State where it is established, and in such case, the name of the authority and any reference number related to the authorisation or registration;

(e) the articles of incorporation and, where relevant, other statutory documentation stating that the applicant is to conduct trade repository services;

(f) the minutes from the meeting where the applicant's Board approved the application;

(g) the name and contact details of the person(s) responsible for compliance, or any other staff involved in compliance assessments for the applicant;

(h) the programme of operations, including indications of the location of the main business activities;

(i) the identification of any subsidiaries and, where relevant, the group structure;

(j) any service, other than the trade repository function, that the applicant provides or intends to provide;

(k) any information on any pending judicial, administrative, arbitration or any other litigation proceedings irrespective of their type, that the applicant may be party to, particularly as regards tax and insolvency matters and where significant financial or reputational costs may be incurred, or any non- pending proceedings, that may still have any material impact on trade repository costs.

2. Upon request by ESMA, the applicants shall also provide additional information during the examination of the application for registration where such information is needed for the assessment of the applicants' capacity to comply with the requirements set out in Chapter III of Regulation (EU) 2015/2365 and for ESMA to duly interpret and analyse the documentation to be submitted or already submitted.

3. Where an applicant considers that a requirement of this Regulation is not applicable to it, it shall clearly indicate that requirement in its application and also provide an explanation why such requirement does not apply.

Article 2

Policies and procedures

Where information regarding policies and procedures is provided as part of an application, an applicant shall ensure that the application contains the following items:

(a) an indication that the Board approves the policies, that the senior management approves the procedures and that the senior management is responsible for the implementation and maintenance of the policies and procedures;

(b) a description of how the communication of policies and procedures within the applicant is organised, how compliance with the policies is ensured and monitored on a day to day basis, and the person or persons responsible for compliance in that regard;

(d) a description of the measures to adopt in the event of a breach of policies and procedures;

(e) an indication of the procedure for reporting to ESMA any material breach of policies or procedures which may result in a breach of the conditions for initial registration.

Article 3

Ownership of the trade repository

1. An application for registration as a trade repository shall contain:

(a) a list containing the name of each person or entity who directly or indirectly holds 5 % or more of the applicant's capital or of its voting rights or whose holding makes it possible to exercise a significant influence over the applicant's management;

(b) a list of any undertakings in which a person referred to in point (a) holds 5 % or more of the capital or voting rights or over whose management they exercise a significant influence.

2. Where the applicant has a parent undertaking, it shall:

(a) identify the legal address of that parent undertaking;

(b) indicate whether the parent undertaking is authorised or registered and subject to supervision, and when this is the case, state any reference number and the name of the responsible supervisory authority.

Article 4

Ownership chart

1. An application for registration as a trade repository shall contain a chart showing the ownership links between the parent undertaking, subsidiaries and any other associated entities or branches.

2. The undertakings shown in the chart referred to in paragraph 1 shall be identified by their full name, legal status and legal address.

Article 5

Organisational chart

1. An application for registration as a trade repository shall contain the organisational chart detailing the organisational structure of the applicant, including that of any ancillary services.

2. That chart shall include information about the identity of the person responsible for each significant role, including senior management and persons who direct the activities of any branches.

Article 6

Corporate governance

1. An application for registration as a trade repository shall contain information regarding the applicant's internal corporate governance policies and the procedures and terms of reference which govern its senior management, including the board, its non-executive members and, where established, committees.

2. That information shall contain a description of the selection process, appointment, performance evaluation and removal of senior management and members of the board.

3. Where the applicant adheres to a recognised corporate governance code of conduct, the application for registration as a trade repository shall identify the code and provide an explanation for any situations where the applicant deviates from the code.

Article 7

Internal control

1. An application for registration as a trade repository shall contain detailed information relating to the internal control system of the applicant, including information regarding its compliance function, risk assessment, internal control mechanisms and arrangements of its internal audit function.

2. The detailed information referred to in paragraph 1 shall contain:

(a) the applicant's internal control policies and respective procedures related to their consistent and effective implementation;

(b) any policies, procedures and manuals regarding the monitoring and evaluation of the adequacy and effectiveness of the applicant's systems;

(c) any policies, procedures and manuals regarding the control and safeguard for the applicant's information processing systems;

(d) the identity of the internal bodies in charge of the evaluation of the relevant internal control findings.

3. An application for registration as a trade repository shall contain the following information with respect to the applicant's internal audit activities:

(a) the composition of any Internal Audit Committee, its competences and responsibilities;

(b) its internal audit function charter, methodologies, standards and procedures;

(c) an explanation how its internal audit charter, methodology and procedures are developed and applied taking into account the nature and extent of the applicant's activities, complexities and risks;

(d) a work plan for three years following the date of application addressing the nature and extent of the applicant's activities, complexities and risks.

Article 8

Regulatory compliance

An application for registration as a trade repository shall contain the following information regarding an applicant's policies and procedures for ensuring compliance with Regulation (EU) 2015/2365:

(a) a description of the roles of the persons responsible for compliance and of any other staff involved in the compliance assessments, including how the independence of the compliance function from the rest of the business will be ensured;

(b) the internal policies and procedures designed to ensure that the applicant, including its managers and employees, comply with all the provisions of Regulation (EU) 2015/2365, including a description of the role of the board and senior management;

(c) where available, the most recent internal report prepared by the persons responsible for compliance or any other staff involved in compliance assessments within the applicant.

Article 9

Senior management and members of the Board

An application for registration as a trade repository shall contain the following information in respect of each member of the senior management and each member of the Board:

(a) a copy of the curriculum vitae;

(b) detailed information on the knowledge and experience in IT management, operations and development;

(c) details regarding any criminal convictions in connection with the provision of financial or data services or in relation to acts of fraud or embezzlement, in particular in the form of an official certificate if available within the relevant Member State;

(d) a self-declaration of good repute in relation to the provision of a financial or data service, where each member of the senior management and the Board states whether they:

(i) have been convicted of any criminal offence in connection with the provision of financial or data services or in relation to acts of fraud or embezzlement;

(ii) have been subject to an adverse decision in any proceedings of a disciplinary nature brought by a regulatory authority or government bodies or agencies or are the subject of any such proceedings which are not concluded;

(iii) have been subject to an adverse judicial finding in civil proceedings before a court in connection with the provision of financial or data services, or for impropriety or fraud in the management of a business;

(iv) have been part of the board or senior management of an undertaking whose registration or authorisation was withdrawn by a regulatory body;

(v) have been refused the right to carry on activities which require registration or authorisation by a regulatory body;

(vi) have been part of the board or senior management of an undertaking which has gone into insolvency or liquidation while this person was connected to the undertaking or within a year of the person ceasing to be connected to the undertaking;

(vii) have been part of the board or senior management of an undertaking which was subject to an adverse decision or penalty by a regulatory body;

(viii)

have been otherwise fined, suspended, disqualified, or been subject to any other sanction in relation to fraud, embezzlement or in connection with the provision of financial or data services, by a government, regulatory or professional body;

(ix) have been disqualified from acting as a director, disqualified from acting in any managerial capacity, dismissed from employment or other appointment in an undertaking as a consequence of misconduct or malpractice;

(e) a declaration of any potential conflicts of interests that the senior management and the members of the board may have in performing their duties and how these conflicts are managed.

Article 10

Staffing policies and procedures

An application for registration as a trade repository shall contain the following information:

(a) a copy of the remuneration policy for the senior management, board members and the staff employed in risk and control functions of the applicant;

(b) a description of the measures put in place by the applicant to mitigate the risk of over-reliance on any individual employees.

Article 11

Fitness and properness

An application for registration as a trade repository shall contain the following information about the applicant's staff:

(a) a general list of the staff directly employed by the trade repository, including their role and qualifications per role;

(b) a specific description of the information technology staff directly employed to provide trade repository services, together with the role and the qualifications of each individual;

(c) a description of the roles and qualifications of each individual who is responsible for internal audit, internal controls, compliance and risk assessment;

(d) the identity of the dedicated staff members and those members of the staff that are operating under an outsourcing arrangement;

(e) details of the training on the applicant's policies and procedures as well as the trade repository business, including any examination or other type of formal assessment required for staff regarding the conduct of trade repository activities.

The description referred to in point (b) shall include written evidence of the academic diploma and experience in information technology of at least one senior staff member responsible for IT matters.

Article 12

Financial reports and business plans

1. An application for registration as a trade repository shall contain the following financial and business information about the applicant:

(a) a complete set of financial statements, prepared in conformity with international standards adopted in accordance with Article 3 of Regulation (EC) No 1606/2002 of the European Parliament and of the Council (6);

(b) where the financial statements of the applicant are subject to statutory audit within the meaning given in Article 2(1) of the Directive 2006/43/EC of the European Parliament and of the Council (7), the financial reports shall include the audit report on the annual and consolidated financial statements;

2. An application for registration as a trade repository shall contain a financial business plan contemplating different business scenarios for the trade repository services over a minimum three years' reference period and including the following additional information:

(a) the expected level of reporting activity in number of transactions;

(b) the relevant fixed and variable costs identified with respect to the provision of repository services under Regulation (EU) 2015/2365;

3. Where the historical financial information referred to in paragraph 1 is not available, an application for registration as a trade repository shall contain the following information about the applicant:

(a) the pro-forma statement demonstrating proper resources and expected business status in six months after registration is granted;

(b) an interim financial report where the financial statements are not yet available for the requested period of time;

(c) a statement of financial position, such as a balance sheet, income statement, changes in equity and of cash flows and notes comprising a summary of accounting policies and other explanatory notes.

4. An application for registration as a trade repository shall contain the audited annual financial statements of any parent undertaking for the three financial years preceding the date of the application.

5. An application for registration as a trade repository shall also contain the following financial information about the applicant:

(a) an indication of any future plans for the establishment of subsidiaries and their location;

(b) a description of the business activities which the applicant plans to carry out, specifying the activities of any subsidiaries or branches.

Article 13

Management of conflicts of interest

An application for registration as a trade repository shall contain the following information on the policies and procedures to manage conflicts of interest put in place by the applicant:

(a) policies and procedures with respect to the identification, management and disclosure of conflicts of interest and a description of the process used to ensure that the relevant persons are aware of the policies and procedures;

(b) any other measures and controls put in place to ensure the requirements referred to in point (a) on conflicts of interest management are met.

Article 14

Confidentiality

1. An application for registration as a trade repository shall contain the internal policies, procedures and mechanisms preventing any use of information maintained in the prospective trade repository:

(a) for illegitimate purposes;

(b) for disclosure of confidential information;

2. The internal policies, procedures and mechanisms shall include the internal procedures on the staff permissions for using passwords to access the data, specifying the staff purpose, the scope of data being viewed and any restrictions on the use of data, as well as detailed information on any mechanisms and controls in place to effectively manage potential cyber-risks and to protect the data maintained from cyber-attacks.

3. Applicants shall provide ESMA with information on the processes to keep a log identifying each staff member accessing the data, the time of access, the nature of data accessed and the purpose.

Article 15

Inventory and mitigation of conflicts of interest

1. An application for registration as a trade repository shall contain an up-to-date inventory, at the time of the application, of existing material conflicts of interest in relation to any ancillary or other related services provided by the applicant and a description of how these are being managed.

2. Where an applicant is part of a group, the inventory shall include any material conflicts of interest arising from other undertakings within the group and how these conflicts are being managed.

Article 16

Information Technology resources and outsourcing

An application for registration as a trade repository shall contain the following information relating to information technology resources:

(a) a detailed description of the information technology system including the relevant business requirements, functional and technical specifications, system architectural and technical design, data model and data flows, and operations and administrative procedures and manuals;

(b) user facilities developed by the applicant in order to provide services to the relevant users, including a copy of any user manual and internal procedures;

(d) the outsourcing arrangements entered into by the applicant, including:

(i) detailed definitions of the services to be provided, including measurable scope of those services, the granularity of the activities as well as conditions under which those activities are rendered, and their timelines;

(ii) service level agreements with clear roles and responsibilities, metrics and targets for every key requirement of the trade repository that is outsourced, the methods employed to monitor the service level of the outsourced functions and the measures or actions to be taken in the event of not meeting service level targets;

(iii) a copy of the contracts governing such arrangements.

Article 17

Ancillary services

Where an applicant, an undertaking within its group, or an undertaking with which the applicant has an agreement relating to trading or post-trading services offers, or plans to offer any ancillary services, its application for registration as a trade repository shall contain the following information:

(a) a description of the ancillary services that the applicant, or the undertaking within its group, performs and a description of any agreement that the trade repository may have with companies offering trading, post- trading, or other related services, as well as copies of such agreements;

(b) the procedures and policies that ensure the necessary degree of operational separation in terms of resources, systems and procedures, between the applicant's trade repository services under Regulation (EU) 2015/2365 and other business lines, including those business lines that comprise the provision of services under Union or third country legislation, irrespective of whether that separate business line is run by the trade repository, a company belonging to its holding company, or any other company within which it has an agreement in the context of the trading or post-trading chain or business line.

Article 18

Transparency of access rules

1. An application for registration as a trade repository shall contain the following information:

(a) the policies and procedures pursuant to which the different types of users report and access the data in a trade repository, including any process that the relevant users may need to access, consult, or modify the information maintained by the trade repository;

(b) a copy of the terms and conditions which determine the rights and obligations of the different types of users in relation to the information maintained by the trade repository;

(d) the access policies and procedures pursuant to which other services providers may have non-discriminatory access to information maintained by the trade repository where the relevant counterparties have provided their written, voluntary and revocable consent;

(e) a description of the channels and mechanisms used by the trade repository to publicly disclose information on the access to that trade repository.

2. The information referred to in points (a), (b) and (c) of paragraph 1 shall be specified for the following types of users:

(a) internal users;

(b) reporting counterparties;

(d) entities responsible for reporting;

(e) non-reporting counterparties;

(f) non-reporting third parties;

(g) entities listed in Article 12(2) of Regulation (EU) 2015/2365;

(h) other types of users, where applicable.

Article 19

Verification of completeness and correctness of data

An application for registration as a trade repository shall contain the following information:

(a) procedures for the authentication of the identity of the users accessing the trade repository in accordance with Article 1 of Delegated Regulation (EU) 2019/358;

(b) procedures for the verification of the use of an XML template complying with the ISO 20022 methodology in accordance with Article 1 of Delegated Regulation (EU) 2019/358;

(c) procedures for the verification of the authorisation and IT permission of the entity reporting on behalf of the reporting counterparty in accordance with Article 1 of Delegated Regulation (EU) 2019/358;

(d) procedures for verification that the logical sequence of the reported SFT details is maintained at all times in accordance with Article 1 of Delegated Regulation (EU) 2019/358;

(e) procedures for the verification of the completeness and correctness of the reported SFT details in accordance with Article 1 of Delegated Regulation (EU) 2019/358;

(f) procedures for the reconciliation of data between trade repositories where counterparties report to different trade repositories in accordance with Article 2 of Delegated Regulation (EU) 2019/358;

(g) procedures for the provision of feedback to the counterparties to the SFTs or the third parties reporting on their behalf, on the verifications performed under points (a) to (e) and the outcomes of the reconciliation process under point (f) in accordance with Article 3 of Delegated Regulation (EU) 2019/358.

Article 20

Pricing policy transparency

An application for registration as a trade repository shall contain a description of the applicant's:

(a) pricing policy, including any existing discounts and rebates and conditions to benefit from such reductions;

(b) fee structure for providing any trade repository and ancillary services including the estimated cost of the trade repository services and ancillary services, along with the details of the methods used to account the separate cost that the applicant may incur when providing trade repository services and ancillary services;

(c) methods used to make the information publicly available to all types of users, including a copy of the fee structure in which trade repository services and ancillary services are unbundled.

Article 21

Operational risk

1. An application for registration as a trade repository shall contain:

(a) a detailed description of the resources available and procedures designed to identify and mitigate operational risk and any other material risk to which the applicant is exposed, including a copy of any relevant policies, methodologies, internal procedures and manuals;

(b) a description of the liquid net assets funded by equity to cover potential general business losses in order to continue providing services as a going concern, and an assessment of the sufficiency of its financial resources with the aim of covering the operational costs of a wind-down or reorganisation of the critical operations and services over at least a six-months period;

(i) all business processes, resources, escalation procedures and related systems which are critical to ensuring the services of the trade repository applicant, including any relevant outsourced service and the trade repository strategy, policy and objectives towards the continuity of these processes;

(ii) the arrangements in place with other financial market infrastructure providers including other trade repositories;

(iii) the arrangements to ensure a minimum service level of the critical functions and the expected timing of the completion of the full recovery of those processes;

(iv) the maximum acceptable recovery time for business processes and systems, having in mind the deadline for reporting to trade repositories as provided for in Article 4 of Regulation (EU) 2015/2365 and the volume of data that the trade repository needs to process within that daily period;

(v) the procedures to deal with incident logging and reviews;

(vi) testing programme and the results of any tests;

(vii) the number of alternative technical and operational sites available, their location, the resources when compared with the main site and the business continuity procedures in place in the event that alternate sites need to be used;

(viii)

information on access to a secondary business site to allow staff to ensure continuity of the service if a main office location is not available;

(ix) plans, procedures and arrangements for handling emergencies and ensuring personnel safety;

(x) plans, procedures and arrangements for the management of crises, including the coordination of the overall business continuity action and its timely and effective activation within a given recovery time objective;

(xi) plans, procedures and arrangements to recover the applicant's system, application and infrastructure components within the prescribed recovery time objective.

(d) a description of the arrangements for ensuring the applicant's trade repository activities in case of disruption and the involvement of trade repository users and other third parties in them.

2. An application for registration as a trade repository shall contain the procedures to ensure the orderly substitution of the original trade repository where requested by a reporting counterparty, or where requested by a third party reporting on behalf of non-reporting counterparties, or whereby such substitution is the result of a withdrawal of registration, and shall include the procedures for the transfer of data and the redirection of reporting flows to another trade repository.

Article 22

Recordkeeping policy

1. An application for registration as a trade repository shall contain information about the receipt and administration of data, including any policies and procedures put in place by the applicant to ensure:

(a) a timely and accurate registration of the information reported;

(b) a record-keeping of all reported information relating to the conclusion, modification or termination of an SFT in a reporting log;

(d) that the data is adequately copied for business continuity purposes.

2. An application for registration as a trade repository shall contain information on the recordkeeping systems, policies and procedures that are used in order to ensure that the data reported is modified appropriately and that positions are calculated correctly in accordance with relevant legislative or regulatory requirements.

Article 23

Data availability mechanisms

An application for registration as a trade repository shall contain a description of the resources, methods and channels that the applicant uses to give access to the information in accordance with paragraphs 1, 2 and 3 of Article 12 of Regulation (EU) 2015/2365, and shall contain the following information:

(a) a procedure to calculate the aggregate positions in accordance with Article 6 of Delegated Regulation (EU) 2019/358 and a description of the resources, methods and channels that the trade repository will employ in order to facilitate access to the data contained therein to the public in accordance with Article 12(1) of Regulation (EU) 2015/2365, and a description of the frequency of updates, along with a copy of any specific manuals and internal policies;

(b) a description of the resources, methods and facilities that the trade repository employs in order to facilitate the access to its information to the relevant authorities in accordance with Article 12(2) of Regulation (EU) 2015/2365, the frequency of the update and the controls and verifications that the trade repository may establish for the access filtering process, along with a copy of any specific manuals and internal procedures;

(c) a procedure and a description of the resources, methods and channels that the trade repository employs in order to facilitate the timely structured and comprehensive collection of data from counterparties, the access to its information to counterparties to SFTs in accordance with Article 4(6) of Regulation (EU) 2015/2365 and Article 80(5) of Regulation (EU) No 648/2012, along with a copy of the specific manuals and internal policies.

Article 24

Direct and immediate access to data by authorities

An application for registration as a trade repository shall contain information on the following:

(a) the terms and conditions under which the authorities referred to in Article 12(2) of Regulation (EU) 2015/2365 are given direct and immediate access to the details of SFTs maintained at the trade repository in accordance with Delegated Regulation (EU) 2019/357;

(b) the procedure under which the authorities referred to in point (a) are given direct and immediate access to the details of SFTs maintained at the trade repository in accordance with Articles 4 and 5 of Delegated Regulation (EU) 2019/358;

Article 25

Payment of fees

An application for registration as a trade repository shall include proof of payment of the relevant registration fees established in Commission Delegated Regulation (EU) 2019/360 (8).

Article 26

Information to be provided in the case of extension of registration

For the purposes of Article 5(5)(b) of Regulation (EU) 2015/2365, the application for extension of an existing registration shall contain the information specified in:

(a) Article 1, except point (k) of paragraph 1;

(b) Article 2;

(d) Article 7, except point (d) of paragraph 2;

(e) Article 8(b);

(f) Article 9(1)(b) and 9(1)(e);

(g) Article 11;

(h) Article 12(2);

(i) Article 13;

(j) Article 14(2);

(k) Article 15;

(l) Article 16, except point (c);

(m) Article 17;

(n) Article 18;

(o) Article 19;

(p) Article 20;

(q) Article 21;

(r) Article 22;

(s) Article 23;

(t) Article 24;

(u) Article 25;

(v) Article 27.

Article 27

Verification of the accuracy and completeness of the application

1. Any information submitted to ESMA during the registration process shall be accompanied by a letter signed by a member of the Board of the trade repository and of the senior management, attesting that the submitted information is accurate and complete to the best of their knowledge, as of the date of that submission.

2. The information shall also be accompanied, where relevant, with the relevant corporate legal documentation certifying the accuracy of the data.

Article 28

Entry into force

This Regulation shall enter into force on the twentieth day following that of its publication in the

Official Journal of the European Union

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 13 December 2018.

For the Commission

The President

Jean-Claude JUNCKER

(1)

OJ L 337, 23.12.2015, p. 1

(2) Commission Delegated Regulation (EU) 150/2013 of 19 December 2012 supplementing Regulation (EU) No 648/2012 of the European Parliament and of the Council on OTC derivatives, central counterparties and trade repositories with regard to regulatory technical standards specifying the details of the application for registration as a trade repository (

OJ L 52, 23.2.2013, p. 25

(3) Commission Delegated Regulation (EU) 2019/357 of 13 December 2018 supplementing Regulation (EU) 2015/2365 of the European Parliament and of the Council with regard to regulatory technical standards on access to details of securities financing transactions (SFTs) held in trade repositories (See page 22 of this Official Journal).

(4) Commission Delegated Regulation (EU) 2019/358 of 13 December 2018 supplementing Regulation (EU) 2015/2365 of the European Parliament and of the Council with regard to regulatory technical standards on the collection, verification, aggregation, comparison and publication of data on securities financing transactions (SFTs) by trade repositories (See page 30 of this Official Journal).

(5)

OJ L 331, 15.12.2010, p. 84

(6) Regulation (EC) No 1606/2002 of the European Parliament and of the Council of 19 July 2002 on the application of international accounting standards (

OJ L 243, 11.9.2002, p. 1

(7) Directive 2006/43/EC of the European Parliament and of the Council of 17 May 2006 on statutory audits of annual accounts and consolidated accounts (

OJ L 157, 9.6.2006, p. 87

(8) Commission Delegated Regulation (EU) 2019/360 of 13 December 2018 supplementing Regulation (EU) 2015/2365 of the European Parliament and of the Council with regard to fees charged by the European Securities and Markets Authority to trade repositories (See page 58 of this Official Journal).