Article 88
Exchange of information with third countries
Transfer of personal data to a third country by a Member State shall be in accordance with Chapter IV of Directive 95/46/EC.
Transfers of personal data to a third country by ESMA shall be in accordance with Article 9 of Regulation (EU) No 45/2001.
Member States and ESMA may also conclude cooperation agreements providing for the exchange of information with third country authorities, bodies and natural or legal persons responsible for one or more of the following:
the supervision of credit institutions, other financial institutions, insurance undertakings and the supervision of financial markets;
the liquidation and bankruptcy of investment firms and other similar procedures;
the carrying out of statutory audits of the accounts of investment firms and other financial institutions, credit institutions and insurance undertakings, in the performance of their supervisory functions, or which administer compensation schemes, in the performance of their functions;
oversight of the bodies involved in the liquidation and bankruptcy of investment firms and other similar procedures;
oversight of persons charged with carrying out statutory audits of the accounts of insurance undertakings, credit institutions, investment firms and other financial institutions;
oversight of persons active on emission allowance markets for the purpose of ensuring a consolidated overview of financial and spot markets;
oversight of persons active on agricultural commodity derivatives markets for the purpose of ensuring a consolidated overview of financial and spot markets.
The cooperation agreements referred to in the third subparagraph may be concluded only where the information disclosed is subject to guarantees of professional secrecy at least equivalent to those required under Article 76. Such exchange of information shall be intended for the performance of the tasks of those authorities or bodies or natural or legal persons. Where a cooperation agreement involves the transfer of personal data by a Member State, it shall comply with Chapter IV of Directive 95/46/EC and with Regulation (EC) No 45/2001 in the case ESMA is involved in the transfer.