8. The information entered in the ESAs Information System under paragraph 7 will be kept in the …

The information entered in the ESAs Information System under paragraph 7 will be kept in the ESAs Information System for a maximum period of 15 years from the date of entry by a competent authority and then automatically deleted from the ESAs Information System. Competent authorities may apply shorter retention periods. Where shorter retention periods have been applied in line with applicable Union or national law, the competent authority should remove the data from the ESAs Information System accordingly after such periods end. In addition to the expiration of the retention period, information could also be deleted by competent authorities upon receiving notification that the person of interest is deceased. The above is without prejudice to the right of access, rectification or erasure by the concerned data subjects as provided for in Articles 17, 18 and 19 of Regulation (EU) 2028/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/