BAKGRUNN (fra kommisjonsforordningen)

(1) Article 107(1) of Regulation (EU) 2023/1114 requires the competent authorities of Member States to conclude, where necessary, cooperation arrangements with supervisory authorities of third countries concerning the exchange of information and the enforcement of obligations arising under that Regulation in third countries. 

(2) In concluding new cooperation arrangements and updating existing cooperation arrangements with third-country authorities, the competent authorities should, where possible, use the template document set out in this Regulation. 

(3) Any transfer of personal data to supervisory authorities of third countries should be undertaken in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council . Appropriate safeguards for the exchange of personal data between competent authorities of Member States and supervisory authorities of third countries may be provided for, among other things, by administrative arrangements referred to in Article 46(3), point (b), of Regulation (EU) 2016/679, which include enforceable and effective data subject rights. 

(4) This Regulation is based on the draft regulatory technical standards developed by the European Securities and Markets Authority (ESMA), in close cooperation with the European Banking Authority and submitted to the Commission.

(5) ESMA has not conducted open public consultations on the draft regulatory technical standards on which this Regulation is based, nor has it analysed the potential related costs and benefits of introducing such standards, as to have done so would have been disproportionate in relation to the scope and impact of those standards, taking into account the fact that the addressees of the standards would only be the competent authorities of the Member States and not market participants. 

(6) ESMA has requested the advice of the Securities and Markets Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1095/2010 of the European Parliament and of the Council. 

(7) The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council and delivered an opinion on 27 May 2024,