ESMA sanctions Regis-TR for serious breaches of organisational obligations

While ESMA has sanctioned EMIR breaches in the past, this is the first enforcement case involving SFTR breaches and the highest fine imposed by ESMA on a trade repository so far. ESMA has also issued a public notice and requires REGIS-TR to bring ongoing infringements to an end. 

It is important for TRs to comply with their obligations under EMIR and SFTR to ensure the quality of the TR data and protect the stability, integrity and trustworthiness of EU financial markets. The services offered by Regis-TR under EMIR and SFTR were affected by the serious issues identified by ESMA, which in particular undermined the correct implementation of the new SFTR reporting regime and compromised the confidentiality of TR data.

Verena Ross, ESMA’s Chair, said: 

“REGIS-TR failed to comply with its obligations under EMIR and SFTR. Data on trades made available to public authorities is essential for market surveillance, enabling early detection of exposure concentrations, cross-border risks, and changes in liquidity and leverage. Today’s decision highlights ESMA’s commitment to enforcing essential requirements that ensure transparency and contribute to well-functioning markets. 

This case stems from long-lasting serious overarching issues identified at REGIS-TR. We will continue to foster a strong compliance culture, including by taking enforcement action, when appropriate.”

ESMA found that REGIS-TR did not comply with key organisational obligations laid down in EMIR and SFTR relating to adequate policies and procedures, organisational structure, and operational risk, as well as specific requirements related to confidentiality and misuse of the information.

The seven breaches specifically relate to:

• deficiencies in REGIS-TR’s policies and procedures under both EMIR and SFTR leading, among other things, to a lack of clarity regarding the roles and responsibilities of the governing bodies;
• shortcomings in REGIS-TR’s organisational structure which did not ensure continuity and orderly functioning of the TR in the performance of its services and activities in relation to SFTR;
• the failure by REGIS-TR to identify sources of operational risk and minimise them through the development of appropriate systems, controls and procedures both in relation to EMIR and SFTR;
• the failure by REGIS-TR to ensure the confidentiality, integrity and protection of information received under EMIR;
• the failure by REGIS-TR to prevent any misuse of information received and maintained in its systems under EMIR.

The breaches were found to have resulted from negligence on the part of REGIS-TR. In calculating the fine, ESMA considered aggravating and mitigating factors provided for in EMIR. 

ESMA also required REGIS-TR to bring the three infringements that have not been remediated yet (related to policies and procedures under EMIR and SFTR and organisational structure for business continuity under SFTR) to an end.

Further information:

Ana Dilaverakis

Communications Officer
press@esma.europa.eu