1. An application for registration as a trade repository shall contain the internal policies and mechanisms preventing any use of information stored in the prospective trade repository:
((a))
for illegitimate purposes;
((b))
for disclosure of confidential information;
((c))
not permitted for commercial use.
2. The latter shall include a description of the internal procedures on the staff permissions for using passwords to access the data, specifying the staff purpose, the scope of data being viewed and any restrictions on the use of data.
3. Applicants shall provide ESMA with information on the processes to keep a log identifying each staff member accessing the data, the time of access, the nature of data accessed and the purpose.