# Commission Delegated Regulation (EU) 2019/359 of 13 December 2018 supplementing Regulation (EU) 2015/2365 of the European Parliament and of the Council with regard to regulatory technical standards specifying the details of the application for registration and extension of registration as a trade repository (Text with EEA relevance), Article 14: Confidentiality

Extent: E+W+S+N.I.

1. An application for registration as a trade repository shall contain the internal policies, procedures and mechanisms preventing any use of information maintained in the prospective trade repository:
(a) for illegitimate purposes;
(b) for disclosure of confidential information;
(c) not permitted for commercial use.
2. The internal policies, procedures and mechanisms shall include the internal procedures on the staff permissions for using passwords to access the data, specifying the staff purpose, the scope of data being viewed and any restrictions on the use of data, as well as detailed information on any mechanisms and controls in place to effectively manage potential cyber-risks and to protect the data maintained from cyber-attacks.
3. Applicants shall provide ESMA with information on the processes to keep a log identifying each staff member accessing the data, the time of access, the nature of data accessed and the purpose.

---
Source: https://www.legislation.gov.uk/eur/2019/359/article/14 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-359/article-14
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.