Recital 6

(6)It is necessary that certain personal data are recorded by crypto-asset service providers to identify their clients or other natural persons relevant for orders in crypto-assets, as these data are fundamental to ensure efficient supervision by competent authorities, including in the area of market abuse. In compliance with the principle of data minimisation set out in Regulation (EU) 2016/679 of the European Parliament and of the Council ³ , crypto-asset service providers should keep only information that is necessary and sufficient to enable the competent authority to carry out a comprehensive assessment of the crypto-asset service provider’s compliance with the requirements of Regulation (EU) 2023/1114 and to monitor the trading activity relating to crypto-assets orders. When processing personal data included in the records, crypto-asset service providers and competent authorities should comply with the relevant provisions of Regulation (EU) 2016/679.