Source: OJ L, 2025/885, 20.8.2025

Current language: EN

RTS on market abuse

COMMISSION DELEGATED REGULATION (EU) 2025/885

of 29 April 2025

supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council with regard to regulatory technical standards specifying the arrangements, systems and procedures to prevent, detect and report market abuse, the templates to be used for reporting suspected market abuse, and the coordination procedures between the competent authorities for the detection and sanctioning of market abuse in cross-border market abuse situations

(Text with EEA relevance)

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) 2023/1114 of the European Parliament and of the Council of 31 May 2023 on markets in crypto-assets and amending Regulation (EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU and (EU) 2019/1937(1)OJ L 150, 9.6.2023, p. 40, ELI: http://data.europa.eu/eli/reg/2023/1114/oj., and in particular Article 92(2), third subparagraph, thereof,

Whereas:

Open full page
Recital 1 Requirements for reporting DLT abuse

Requirements for the arrangements, procedures and systems that persons professionally arranging or executing transactions in crypto-assetsmeans a digital representation of a value or of a right that is able to be transferred and stored electronically using distributed ledger technology or similar technology; are to have in place for the reporting of ordersmeans each and every order, including each and every quote, irrespective of whether its purpose is initial submission, modification, update or cancellation of an order and irrespective of its type., transactions and other aspects of the functioning of distributed ledger technologyor ‘DLT’ means a technology that enables the operation and use of distributed ledgers; (DLT), including the consensus mechanismmeans the rules and procedures by which an agreement is reached, among DLT network nodes, that a transaction is validated;, where there might exist circumstances indicating that market abuse has been committed, is being committed or is likely to be committed are necessary. Such requirements are critical and should assist in the prevention and detection of market abuse. Those requirements should also assist in ensuring that reports concerning reasonable suspicions on ordersmeans each and every order, including each and every quote, irrespective of whether its purpose is initial submission, modification, update or cancellation of an order and irrespective of its type., transactions and other aspects of the functioning of distributed ledger technologyor ‘DLT’ means a technology that enables the operation and use of distributed ledgers; (STOR) submitted to competent authoritiesmeans one or more authorities:designated by each Member State in accordance with Article 93 concerning offerors, persons seeking admission to trading of crypto-assets other than asset-referenced tokens and e-money tokens, issuers of asset-referenced tokens, or crypto-asset service providers;designated by each Member State for the application of Directive 2009/110/EC concerning issuers of e-money tokens; are meaningful, comprehensive, and useful.

Recital 2 Appropriate monitoring systems and human analysis

To ensure that prevention and detection of market abuse is effective, appropriate systems should be in place to monitor ordersmeans each and every order, including each and every quote, irrespective of whether its purpose is initial submission, modification, update or cancellation of an order and irrespective of its type., transactions and other aspects of functioning of the DLT, in accordance with the scale, size and nature of the business activity of the person professionally arranging or executing transactions. Such systems should provide for human analysis carried out by appropriately trained staff based on objective information at the disposal of the reporting entity. The entity should collect additional personal datameans personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679;, only to ensure appropriate human analysis. To allow for further analysis of potential insider dealing or market manipulation or attempted insider dealing or market manipulation, the systems for monitoring market abuse should be capable of producing alerts in line with specified parameters. The access to such alerts should be recorded to ensure that they are only used for detecting market abuse. The whole process is likely to require some level of automation.

Recital 3 Proportionality based on market footprint

To analyse whether the arrangements, systems and procedures to prevent and detect market abuse are appropriate, it is necessary to assess the impact that the person that professionally arranges or executes transactions may have on the market. As part of that assessment, such persons should assess whether they have a significant or dominant position in any crypto-assetmeans a digital representation of a value or of a right that is able to be transferred and stored electronically using distributed ledger technology or similar technology; market asset segment in which case those arrangements, systems and procedures should be proportionate to their position.

HAS ADOPTED THIS REGULATION:

  1. Article 1Definitions
  2. Article 2General requirements
  3. Article 3Prevention, monitoring and detection
  4. Article 4Training
  5. Article 5Reporting of suspicious orders or transactions
  6. Article 6Timing of STORs
  7. Article 7Exchange of reports between competent authorities
  8. Article 8Coordination procedures for the detection and sanctioning of cross-border market abuse situations
  9. Article 9Entry into force
Annex
  1. AnnexSTOR template

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 29 April 2025.

For the Commission

The President

Ursula VON DER LEYEN

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod