> For the complete documentation index, see [llms.txt](https://www.mica.wtf/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.mica.wtf/eu-level/guidelines.md). # Guidelines - [Overview](https://www.mica.wtf/eu-level/guidelines/guidelines.md): ESMA, EBA and EDPB guidelines issued under MiCA, MiFID II, MiFIR and GDPR, plus selected Commission guidance for DSA and Data Act implementation. ESA guidelines are comply-or-explain; GDPR EDPB/WP29 m - [C/2024/3014 — Elections](https://www.mica.wtf/eu-level/guidelines/commission-c-2024-3014-electoral-processes.md): Commission guidelines under Article 35(3) DSA on mitigating systemic risks for electoral processes. - [Commission C/2025/5026 — Vehicle data](https://www.mica.wtf/eu-level/guidelines/commission-c-2025-5026-vehicle-data-guidance.md): Commission guidance on how Chapter II of the Data Act applies to vehicle data and automotive-sector access rules. - [C/2025/5519 — Minors online](https://www.mica.wtf/eu-level/guidelines/commission-c-2025-5519-minors-online.md): Commission guidelines under Article 28(4) DSA on privacy, safety and security for minors on online platforms. - [EBA/GL/2017/05 — Guidelines on ICT Risk Assessment under the SREP](https://www.mica.wtf/eu-level/guidelines/eba-gl-2017-05-ict-risk-srep.md): EBA guideline on DORA: Guidelines on ICT Risk Assessment under the SREP. - [EBA/GL/2019/02 — Guidelines on outsourcing arrangements](https://www.mica.wtf/eu-level/guidelines/eba-gl-2019-02-outsourcing-arrangements.md): EBA guideline on DORA: Guidelines on outsourcing arrangements. - [EBA/GL/2025/02 — Guidelines amending Guidelines EBA/GL/2019/04 o...](https://www.mica.wtf/eu-level/guidelines/eba-gl-2025-02-amend-ict-security-risk.md): EBA guideline on DORA: Guidelines amending Guidelines EBA/GL/2019/04 on ICT and security risk management. - [EDPB 01/2020 — Transfer measures](https://www.mica.wtf/eu-level/guidelines/edpb-01-2020-supplementary-transfer-measures.md): EDPB recommendations on supplementary measures for Chapter V transfer tools after Schrems II. - [EDPB 01/2022 — Right of access](https://www.mica.wtf/eu-level/guidelines/edpb-01-2022-right-of-access.md): EDPB guidance on GDPR Article 15 right-of-access requests. - [EDPB 1/2024 — Legitimate interest](https://www.mica.wtf/eu-level/guidelines/edpb-01-2024-legitimate-interest.md): EDPB public-consultation guideline on the Article 6(1)(f) legitimate-interest lawful basis. - [EDPB 01/2025 — Pseudonymisation](https://www.mica.wtf/eu-level/guidelines/edpb-01-2025-pseudonymisation.md): EDPB public-consultation guideline on pseudonymisation and pseudonymised data under the GDPR. - [EDPB 2/2023 — ePrivacy Article 5(3)](https://www.mica.wtf/eu-level/guidelines/edpb-02-2023-eprivacy-article-5-3-technical-scope.md): EDPB guidance on the technical scope of Article 5(3) of Directive 2002/58/EC. - [EDPB 4/2019 — DPbDD](https://www.mica.wtf/eu-level/guidelines/edpb-04-2019-data-protection-by-design.md): EDPB guidance on Article 25 GDPR data protection by design and by default. - [EDPB 05/2020 — Consent](https://www.mica.wtf/eu-level/guidelines/edpb-05-2020-consent.md): EDPB guidance on valid GDPR consent, including free, specific, informed and unambiguous consent. - [EDPB 07/2020 — Controller/processor](https://www.mica.wtf/eu-level/guidelines/edpb-07-2020-controller-processor.md): EDPB guidance on controller, joint-controller and processor roles under the GDPR. - [EDPB 9/2022 — Breach notification](https://www.mica.wtf/eu-level/guidelines/edpb-09-2022-breach-notification.md): EDPB guidance on personal data breach notification under GDPR Articles 33 and 34. - [WP248 rev.01 — DPIA](https://www.mica.wtf/eu-level/guidelines/edpb-wp248-dpia.md): EDPB-endorsed WP29 guidance on DPIAs and high-risk processing under Article 35 GDPR. - [WP260 rev.01 — Transparency](https://www.mica.wtf/eu-level/guidelines/edpb-wp260-transparency.md): EDPB-endorsed WP29 transparency guidance for GDPR privacy-notice and data-subject information duties. - [JC 2024/28 — Crypto Classification Test](https://www.mica.wtf/eu-level/guidelines/esas-guidelines-on-templates-for-explanations-and-opinions-and-the-standardised-test.md): Joint ESA guidelines and templates for crypto-asset classification explanations and legal opinions under MiCA Article 97(1). - [ESMA/2016/1477 — MAR Guidelines — Persons receiving market sound...](https://www.mica.wtf/eu-level/guidelines/esma-2016-1477-market-soundings.md): ESMA guideline on MAR: MAR Guidelines — Persons receiving market soundings. - [ESMA/2016/1480 — MAR Guidelines on commodity derivatives (inside...](https://www.mica.wtf/eu-level/guidelines/esma-2016-1480-commodity-derivatives.md): ESMA guideline on MAR: MAR Guidelines on commodity derivatives (inside information on commodity derivatives markets or related spot markets). - [ESMA35-36-1952 — Guidelines on certain aspects of the MiFID II complianc...](https://www.mica.wtf/eu-level/guidelines/esma35-36-1952-compliance.md): Guidelines on certain aspects of the MiFID II compliance function requirements - [ESMA35-36-2319 — Joint EBA and ESMA Guidelines on the assessment of the ...](https://www.mica.wtf/eu-level/guidelines/esma35-36-2319-joint-suitability-mgmt-body.md): Joint EBA and ESMA Guidelines on the assessment of the suitability of members of the management body and key function holders (revised) - [ESMA35-43-1957 — Guidelines on complex debt instruments and structured d...](https://www.mica.wtf/eu-level/guidelines/esma35-43-1957-complex-debt.md): Guidelines on complex debt instruments and structured deposits - [ESMA35-43-1968 — Guidelines on cross-selling practices under MiFID II](https://www.mica.wtf/eu-level/guidelines/esma35-43-1968-cross-selling.md): Guidelines on cross-selling practices under MiFID II - [ESMA35-43-2183 — Guidelines for the assessment of knowledge and competen...](https://www.mica.wtf/eu-level/guidelines/esma35-43-2183-knowledge-competence.md): Guidelines for the assessment of knowledge and competence (MiFID II) - [ESMA35-43-3006 — Guidelines on certain aspects of the MiFID II appropria...](https://www.mica.wtf/eu-level/guidelines/esma35-43-3006-appropriateness.md): Guidelines on certain aspects of the MiFID II appropriateness and execution-only requirements - [ESMA35-43-3172 — Guidelines on certain aspects of the MiFID II suitabili...](https://www.mica.wtf/eu-level/guidelines/esma35-43-3172-suitability.md): Guidelines on certain aspects of the MiFID II suitability requirements (revised) - [ESMA35-43-3448 — Guidelines on MiFID II product governance requirements ...](https://www.mica.wtf/eu-level/guidelines/esma35-43-3448-product-governance.md): Guidelines on MiFID II product governance requirements (revised) - [ESMA35-43-3565 — Guidelines on certain aspects of the MiFID II remunerat...](https://www.mica.wtf/eu-level/guidelines/esma35-43-3565-remuneration.md): Guidelines on certain aspects of the MiFID II remuneration requirements - [ESMA70-145-1345 — Guidelines on transaction reporting, order record keepi...](https://www.mica.wtf/eu-level/guidelines/esma70-145-1345-transaction-reporting.md): Guidelines on transaction reporting, order record keeping and clock synchronisation under MiFID II - [ESMA70-154-271 — Guidelines on the management body of market operators a...](https://www.mica.wtf/eu-level/guidelines/esma70-154-271-market-operators-drsps.md): Guidelines on the management body of market operators and data reporting services providers - [ESMA70-156-4966 — Guidelines on MAR delay in the disclosure of in...](https://www.mica.wtf/eu-level/guidelines/esma70-156-4966-delay-disclosure.md): ESMA guideline on MAR: Guidelines on MAR delay in the disclosure of inside information and interactions with prudential supervision. - [ESMA70-156-869 — Guidelines on the application of C6 and C7 of Annex 1 o...](https://www.mica.wtf/eu-level/guidelines/esma70-156-869-c6-c7-annex-1.md): Guidelines on the application of C6 and C7 of Annex 1 of MiFID II - [ESMA70-872942901-63 — Guidelines on calibration of circuit breakers and publi...](https://www.mica.wtf/eu-level/guidelines/esma70-872942901-63-trading-halts.md): Guidelines on calibration of circuit breakers and publication of trading halts under MiFID II - [ESMA35-1872330276-2030 — Reverse Solicitation Guidelines](https://www.mica.wtf/eu-level/guidelines/final-report-on-the-guidelines-on-reverse-solicitation.md): ESMA guidelines on reverse solicitation under MiCA Article 61(3), including supervisory practices for third-country firm solicitation. - [ESMA75-453128700-1323 — Crypto-Asset Financial Instruments](https://www.mica.wtf/eu-level/guidelines/final-report-on-the-guidelines-on-the-conditions-and-criteria-for-the-qualification-of-crypto-assets.md): ESMA guidelines on the conditions and criteria for qualifying crypto-assets as financial instruments under MiCA Article 2(5). - [ESMA35-1872330276-1936 — Investor Protection Requirements](https://www.mica.wtf/eu-level/guidelines/final-report-on-the-guidelines-specifying-certain-requirements-of-mica-on-investor-protection-thir.md): ESMA guidelines on MiCA investor-protection requirements for suitability, periodic statements, and CASP transfer services. - [ESMA75-223375936-6132 — Systems & Security Access](https://www.mica.wtf/eu-level/guidelines/final-report-on-the-guidelines-specifying-union-standards-on-the-maintenance-of-systems-and-security.md): ESMA guidelines on systems, security access protocols, and related crypto-asset white paper requirements under MiCA. - [ESMA35-1872330276-2032 — CASP Transfer Services](https://www.mica.wtf/eu-level/guidelines/guidelines-casp-transfer-services-article-82.md): ESMA guidelines for CASP transfer services under MiCA Article 82(2). - [ESMA75-453128700-1039 — Market Abuse Supervisory Practices](https://www.mica.wtf/eu-level/guidelines/guidelines-market-abuse-supervisory-practices-article-92.md): ESMA guidelines on supervisory practices for preventing and detecting market abuse under MiCA Article 92(3). - [EBA/GL/2024/06 — ART Internal Governance](https://www.mica.wtf/eu-level/guidelines/guidelines-on-internal-governance-arrangements-for-issuers-of-arts-under-micar.md): EBA guidelines on internal governance arrangements for issuers of asset-referenced tokens under MiCA Article 34(13). - [ESMA35-24871704-2922 — Knowledge & Competence Assessment](https://www.mica.wtf/eu-level/guidelines/guidelines-on-knowledge-and-competence.md): ESMA guidelines on knowledge and competence requirements for CASPs giving advice or information under MiCA Article 81(7). - [EBA/GL/2024/08 — Liquidity Stress Testing](https://www.mica.wtf/eu-level/guidelines/guidelines-on-liquidity-stress-testing-under-micar.md): EBA guidelines on liquidity stress testing for significant asset-referenced and e-money tokens under MiCA Article 45(4). - [EBA/GL/2024/07 — Issuer Recovery Plans](https://www.mica.wtf/eu-level/guidelines/guidelines-on-recovery-plans-under-micar.md): EBA guidelines on recovery plans for issuers of asset-referenced tokens and e-money tokens under MiCA Article 46(6). - [EBA/GL/2024/13 — Issuer Redemption Plans](https://www.mica.wtf/eu-level/guidelines/guidelines-on-redemption-plans-under-micar.md): EBA guidelines on redemption plans for issuers of asset-referenced tokens and e-money tokens under MiCA Article 47(5). - [EBA/GL/2024/16 — ART Supervisory Reporting](https://www.mica.wtf/eu-level/guidelines/guidelines-on-reporting-templates-supervisory-duties.md): EBA guidelines on reporting templates for asset-referenced and e-money token supervisory duties under MiCA Article 55(1). - [EBA/GL/2024/16 — CASP Supervisory Reporting](https://www.mica.wtf/eu-level/guidelines/guidelines-on-templates-to-assist-competent-authorities-in-performing-their-supervisory-duties.md): EBA guidelines on templates supporting competent-authority supervisory duties for CASPs under MiCA Article 97(1). - [EBA/GL/2024/09 — Qualifying Holder Suitability](https://www.mica.wtf/eu-level/guidelines/guidelines-on-the-suitability-assessment-of-shareholders-and-members-with-qualifying-holdings.md): Joint EBA/ESMA guidelines on qualifying-holder suitability assessments under MiCA Articles 42(6) and 84(4). - [EBA/GL/2024/09 — Management Body Suitability](https://www.mica.wtf/eu-level/guidelines/guidelines-on-the-suitability-assessment-of-the-members-of-the-management-body.md): Joint EBA/ESMA guidelines on management-body suitability assessments under MiCA Articles 34(8) and 68(10). - [ESMA35-1872330276-2031 — Suitability and Periodic Statement](https://www.mica.wtf/eu-level/guidelines/guidelines-suitability-periodic-statement-article-81.md): ESMA guidelines on suitability requirements and periodic statements for portfolio management under MiCA Article 81(15). - [JC/GL/2024/34 — Joint Guidelines on the estimation of aggregate...](https://www.mica.wtf/eu-level/guidelines/jc-gl-2024-34-costs-losses.md): Joint (ESAs) guideline on DORA: Joint Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents. - [JC/GL/2024/36 — Joint Guidelines on the oversight cooperation a...](https://www.mica.wtf/eu-level/guidelines/jc-gl-2024-36-oversight-cooperation.md): Joint (ESAs) guideline on DORA: Joint Guidelines on the oversight cooperation and information exchange between the ESAs and the competent authorities. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.mica.wtf/eu-level/guidelines.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.