Recital 16

(16)A number of the provisions of Directive 2004/39/EC require investment firms to collect and maintain information relating to clients and services provided to clients. Where those requirements involve the collection and processing of personal data, firms should ensure that they comply with national measures implementing Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 ² on the protection of individuals with regard to the processing of personal data and on the free movement of such data.