S.L. 370.23 Art. 3Transfer of personal data to a European regulatory authority or overseasregulatory authority, and retention of personal data.

(1) When transferring personal data to a European regulatory authority or to an overseas regulatory authority in accordance with its obligations under the AIFM Directive, the competent authority shall transfer such data in accordance with

Directive 95/46/EC.

(2) When receiving personal data from a European regulatory authority or from an overseas regulatory authority under the provisions of the AIFM Directive, the competent authority shall retain such personal data for a maximum period of five years.