Source: OJ L, 2024/2902, 28.11.2024

Current language: EN

Article 5 Retention period of personal data by issuers


The issuersmeans a natural or legal person, or other undertaking, who issues crypto-assets; shall not retain any personal datameans personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679; on holders submitted by the crypto-asset service providersmeans a legal person or other undertaking whose occupation or business is the provision of one or more crypto-asset services to clients on a professional basis, and that is allowed to provide crypto-asset services in accordance with Article 59; in accordance with Articles 1(2) and 3(2) of this Regulation for longer than necessary to comply with the reporting obligations laid down in Article 22(1) of Regulation (EU) 2023/1114. Such retention period shall not exceed 5 years from the date of obtaining the personal datameans personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679; by the issuersmeans a natural or legal person, or other undertaking, who issues crypto-assets;.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod