Recital 4

(4)The information contained in the application for authorisation would include personal data. In compliance with the principle of data minimisation, enshrined in Article 5(1), point (c), of Regulation (EU) 2016/679 of the European Parliament and of the Council ² , only the personal data necessary to enable the competent authority to carry out a comprehensive assessment of the applicant issuer, the assessment of the members of its management body, its ability to comply with the prudential requirements of Regulation (EU) 2023/1114, and that the applicant issuer does not fall into any ground of refusal of the authorisation set out in Article 21(2), points (a) to (e), of Regulation (EU) 2023/1114 should be requested.