Recital 9

(9)The exchange of information between competent authorities in relation to investigation, supervision and enforcement activities should be carried out in compliance with the right to protection of personal data of the persons concerned, as set out in Articles 7 and 8, respectively, of the Charter of Fundamental Rights of the European Union and must comply with Regulation (EU) 2016/679 of the European Parliament and of the Council ² . It follows that only personal data that are necessary for the purpose of investigation, supervision and enforcement activities under Regulation (EU) 2023/1114 are exchanged and that those data are not kept longer than necessary for that purpose.