The European Securities and Markets Authority (ESMA) has published its 2018 Work Programme (WP), which sets out its priorities and areas of focus for 2018 in support of its mission to enhance investor protection and promote stable and orderly financial markets.

For 2018, the key areas of focus under ESMA’s activities of supervisory convergence, assessing risks, single rulebook and direct supervision will be:

• Providing guidance and promoting the consistent application of MiFID II and MiFIR by market participants and National Competent Authorities (NCAs);

• Ensuring the quality, integration, usability and transparency of the data that ESMA collects;

• Contributing to the development of Level 2 measures in relation to the revised Prospectus regime; AND

• Enhancing the effectiveness and lasting impact of supervisory activities at individual credit rating agencies (CRA) and trade repositories (TR) level.

The overall budget for 2018 is expected to be €42,051,386 with a projected staff of 232.

ESMA fines DTCC Derivatives Repository Limited €64,000 for data access failures

The European Securities and Markets Authority (ESMA) has fined the trade repository DTCC Derivatives Repository Limited (DDRL) €64,000, and issued a public notice, for negligently failing to put in place systems capable of providing regulators with direct and immediate access to derivatives trading data. This is a key requirement under the European Markets and Infrastructure Regulation (EMIR) in order to improve transparency and facilitate the monitoring of systemic risks in derivatives markets.

This is the first time ESMA has taken enforcement action against a trade repository registered in the European Union (EU). DDRL is the largest EU registered trade repository.

ESMA found that DDRL failed to provide direct and immediate access to derivatives data from 21 March 2014 to 15 December 2014, a period of about nine months in which access delays increased from two days to 62 days after reporting and affected 2.6 billion reports. This was due to its negligence in:

• failing to put in place data processing systems that were capable of providing regulators with direct and immediate access to reported data;
• failing, once they became aware, to inform ESMA in a timely manner of the delays that were occurring; and
• taking three months to establish an effective remedial action plan even while delays were worsening.

DDRL’s failures caused delays to regulators accessing data, revealed systemic weaknesses in its organisation particularly its procedures, management systems or internal controls and negatively impacted the quality of the data it maintained.

Unauthorised use of ESMA’s identity and logo

The European Securities and Markets Authority (ESMA) has been informed that its identity and logo have been used in communications targeting company employees in order to request the transfer of company money.

In addition, ESMA has been informed that attempts were made to use the name of a senior member of ESMA staff also for the purpose of fraudulent scams targeting a savings bank and a listed issuer.

Please note that all references to ESMA or any ESMA employees in these communications, which do not originate from ESMA, are entirely false and have been made without ESMA’s knowledge or consent.

In order to protect yourself against these unauthorised communications, ESMA advises you:

• To check whether the e-mail received is genuine;
• To inform your superior in case of suspicious e-mails;
• To contact ESMA if any suspicion arises;
• To contact the police;

Be aware that fraudsters might use ESMA’s name, logo or the name of an ESMA staff member, a bogus website which appears to be that of ESMA, and/or make bogus references to people said to work in ESMA. Be aware of the following when making your checks:

• ESMA is a European Supervisory Authority established by a Regulation of the European Parliament and of the Council;
• ESMA is based in Paris, France and has no affiliates or branch offices elsewhere;
• ESMA’s emails end with the address @esma.europa.eu;
• ESMA’s telephone number begins with the prefix +33 for France, no other prefix is valid;
• ESMA’s official website can be found at www.esma.europa.eu

The European Securities and Markets Authority (ESMA) has published its first Supervisory Convergence Work Programme 2016 (SCWP), which details the activities and tasks it will carry out to promote sound, efficient and consistent supervision across the European Union.

The publication of the SCWP expands on the high-level objective outlined in the Annual Work Programme 2016 and fulfils a key commitment in ESMA’s Strategic Orientation 2016-2020 to outline how it would refocus its resources from single rulebook to supervisory convergence work.

The European Securities and Markets Authority (ESMA) has today published its 2016 supervisory priorities for credit rating agencies (CRAs) and trade repositories (TRs), as well as its annual report summarising the key supervisory work and actions undertaken during 2015.

2016 Supervisory Priorities

ESMA has seen a number of changes in the CRA and TR industries during 2015, with new applicants for registration in both sectors, and current authorised entities seeking to develop their businesses. This has included CRAs providing credit ratings on new asset classes or in new geographic areas, and TRs offering trade reporting services for other instrument types.

ESMA identifies its supervisory priorities on the basis of risk assessment exercises conducted throughout the year. In 2015 these identified high levels of governance and strategy risk, and operational risk in the CRA industry and high levels of risk associated with TRs’ data and systems. Therefore, in 2016 ESMA will focus its supervisory activities on:

• CRA governance and strategy and the quality of credit ratings;
• TR data quality and data access;
• Fees charged and information security for all supervised entities.

Steven Maijoor, ESMA Chair, said:

“The credit rating and trade repository industries continue to evolve and develop. We are receiving new applications for registration and existing entities are seeking to develop their businesses by expanding into new areas. ESMA supports these developments where they contribute to the maintenance of stable and orderly financial markets.

“For this reason, in 2016 ESMA will focus its work on the quality of the services being provided by supervised entities. This means we will concentrate on issues surrounding CRA governance, strategy and ratings quality, along with data quality and access to TRs’ data with a broad focus on the fee structures and information security in both industries.”

2015 Annual Supervisory Review – CRAs and TRs

In 2015, following its risk-based approach, ESMA focused its supervisory efforts on CRAs’ governance, risk management and internal decision making and on CRAs’ business development processes. Some notable achievements were:

• investigating the techniques being applied to validate credit rating methodologies by some CRAs and using the differences identified to encourage industry-wide debate about appropriate validation standards;
• conducting an IT risk assessment which identified that CRAs are facing serious risks in several areas including IT operations and information security;
• investigating the process of issuing credit ratings followed by one CRA and raising concerns about the preparation of issue ratings, the workloads of credit rating analysts and their involvement in the provision of ancillary services; and
• concluding an enforcement case against DBRS Ratings Ltd for internal control failings and imposing a €30,000 fine for past record-keeping breaches. The case highlighted the need for CRAs to establish clear decision-making procedures, organisational structures and effective compliance functions.

The key risks TR supervision focused on in 2015 related to the quality of TRs’ data, access to data held by TRs and the operation and performance of TRs’ systems. In 2015, ESMA continued working with TRs to implement the data quality action plan established in September 2014 including:

• harmonising TRs’ data validation;
• monitoring the inter-TR reconciliation process; and
• ensuring the harmonisation of the aggregate data made available on TRs’ websites.

ESMA has also been monitoring National Competent Authorities’ (NCAs) access to TR data. It has entered into a number of Memoranda of Understanding (MoUs) to help third country regulatory authorities access TR data and is developing an IT system to allow NCAs to submit data queries through a centralised web portal.