[Federal Register Volume 82, Number 15 (Wednesday, January 25, 2017)]
[Proposed Rules]
[Pages 8369-8391]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2017-01287]


=======================================================================
-----------------------------------------------------------------------

COMMODITY FUTURES TRADING COMMISSION

17 CFR Part 49

RIN 3038-AE44


Proposed Amendments To Swap Data Access Provisions and Certain 
Other Matters

AGENCY: Commodity Futures Trading Commission.

ACTION: Notice of proposed rulemaking.

-----------------------------------------------------------------------

SUMMARY: Pursuant to Title VII of the Dodd-Frank Wall Street Reform and 
Consumer Protection Act of 2010 (``Dodd-Frank Act''), as amended by the 
Fixing America's Surface Transportation Act of 2015 (``FAST Act''), the 
Commodity Futures Trading Commission (``Commission'' or ``CFTC'') is 
proposing amendments the Commission's regulations relating to access to 
swap data held by Swap Data Repositories. The proposed amendments would 
implement pertinent provisions of the FAST Act and make associated 
changes to the Commission's regulations governing the grant of access 
to swap data to certain foreign and domestic authorities by Swap Data 
Repositories and to certain other regulations unrelated to such access.

DATES: Comments must be received on or before March 27, 2017.

ADDRESSES: You may submit comments, identified by RIN 3038-AE44, by any 
of the following methods:
     CFTC Web site: https://comments.cftc.gov. Follow the 
instructions for submitting comments through the Comments Online 
process on the Web site.
     Mail: Christopher Kirkpatrick, Secretary of the 
Commission, Commodity Futures Trading Commission, Three Lafayette 
Centre, 1155 21st Street NW., Washington, DC 20581.
     Hand Delivery/Courier: Same as Mail, above.
     Federal eRulemaking Portal: http://www.regulations.gov. 
Follow the instructions for submitting comments.
    Please submit your comments using only one method.
    All comments must be submitted in English, or if not, accompanied 
by an English translation. Comments will be posted as received to 
www.cftc.gov. You should submit only information that you wish to make 
available publicly. If you wish the Commission to consider information 
that you believe is exempt from disclosure under the Freedom of 
Information Act (``FOIA''), a petition for confidential treatment of 
the exempt information may be submitted according to the procedures 
established in Sec.  145.9 of the Commission's regulations.\1\
---------------------------------------------------------------------------

    \1\ 17 CFR 145.9. All Commission regulations cited herein are 
set forth in chapter I of Title 17 of the Code of Federal 
Regulations.
---------------------------------------------------------------------------

    The Commission reserves the right, but shall have no obligation, to 
review, pre-screen, filter, redact, refuse or remove any or all of your 
submission from www.cftc.gov that it may deem to be inappropriate for 
publication, such as obscene language. All submissions that have been 
redacted or removed that contain comments on the merits of the 
rulemaking will be retained in the public comment file and will be 
considered as required under the Administrative Procedure Act and other 
applicable laws, and may be accessible under the FOIA.

FOR FURTHER INFORMATION CONTACT: Daniel Bucsa, Deputy Director, 
Division of Market Oversight--Data and Reporting Branch, (202) 418-
5435, [email protected]; Jeffrey P. Burns, Assistant General Counsel, 
Office of the General Counsel, (202) 418-5101, [email protected]; David 
E. Aron, Special Counsel, Division of Market Oversight--Data and 
Reporting Branch, (202) 418-6621, [email protected]; or Owen J. Kopon, 
Special Counsel, Division of Market Oversight--Data and Reporting 
Branch, (202) 418-5360, [email protected], Commodity Futures Trading 
Commission, Three Lafayette Centre, 1151 21st Street NW., Washington, 
DC 20581.

SUPPLEMENTARY INFORMATION: 

Table of Contents

I. Background and Introduction
    A. Statutory Background: The Dodd-Frank Act
    B. Regulatory History: The Part 49 Rules and the Commission's 
2012 Interpretative Statement
    1. Access to SDR Swap Data
    2. The Regulatory Indemnification Requirement
    C. FAST Act Amendments to CEA Section 21
    D. CEA Section 8 Informs the Confidentiality Provisions of CEA 
Section 21
    E. Summary of Proposed Revisions to Part 49
    F. Rescission of 2012 Interpretative Statement
II. Discussion
    A. Definitions: Proposed Amendments to Sec.  49.2
    B. Domestic and Foreign Regulators With Regulatory 
Responsibility Over SDRs: Proposed Amendments to Sec.  49.17(d)(2) 
and (3)
    1. The Current Rule
    2. Proposed Amendments
    3. Request for Comment
    C. Appropriateness Determination for Foreign Regulators and Non-
Enumerated Domestic Regulators: Proposed Sec.  49.17(h) and Proposed 
Amendments to Sec.  49.17(b)
    1. The Current Rule
    2. The Proposed Amendments
    3. The Factors Required for a Determination Order
    a. Scope of Jurisdiction
    b. Robust Confidentiality Safeguards
    c. Additional Considerations
    d. Other Matters Regarding the Determination Order Process
    e. Request for Comment
    4. Proposed Amendments to Sec.  49.17(d)(4)--SDR Notice and 
Verification Obligations
    5. Proposed New Sec.  49.17(i)--Delegation of Authority
    6. Request for Comment
    D. CEA Section 21(d) Confidentiality Agreements: Proposed 
Amendments to Sec.  49.18
    1. Current Sec.  49.18
    2. Proposed Amendments to Sec.  49.18(a)--Confidentiality 
Arrangement Required Prior to Disclosure of Swap Data
    3. Proposed Amendments to Sec.  49.18(b)--Required Elements of 
the Confidentiality Arrangement
    4. Removal of Sec.  49.18(c)--ADRs and AFRs With Regulatory 
Responsibility Over an SDR
    5. Failure To Fulfill the Terms of a Confidentiality 
Arrangement: Proposed Sec.  49.18(c) and (d)
    6. Proposed Sec.  49.18(e)--Delegation of Authority
    7. Conforming Changes
    8. Request for Comment
    E. Other Changes
III. Request for Comment
IV. Related Matters
    A. Regulatory Flexibility Act
    B. Paperwork Reduction Act
    1. Summary of the Proposed Requirements
    2. Collection of Information
    3. Request for Comments on Collection
    C. Cost-Benefit Considerations
    D. Antitrust Considerations

I. Background and Introduction

A. Statutory Background: The Dodd-Frank Act

    Title VII of the Dodd-Frank Act \2\ amended the Commodity Exchange 
Act (``CEA'' or the ``Act'') \3\ to establish a

[[Page 8370]]

comprehensive new regulatory framework for swaps including, in new CEA 
section 21, the registration and regulation of Swap Data Repositories 
(``SDRs'').\4\ CEA section 21 imposes on SDRs, among other duties and 
responsibilities, the duty to maintain the privacy of all swap 
transaction information received from a swap dealer, counterparty, or 
any other registered entity.\5\ CEA section 21(c)(7) directs SDRs to 
make swap data available ``on a confidential basis pursuant to section 
8 [of the CEA]'' \6\ to certain enumerated domestic authorities and any 
other person the Commission determines to be appropriate, which may 
include certain types of foreign authorities.\7\ Entities that are 
eligible to receive access to swap data from an SDR pursuant to CEA 
section 21(c)(7) are referred to herein, collectively, as the 
``21(c)(7) entities'').
---------------------------------------------------------------------------

    \2\ See Dodd-Frank Wall Street Reform and Consumer Protection 
Act, Public Law 111-203, 124 Stat. 1376 (2010), available at http://www.cftc.gov/LawRegulation/OTCDERIVATIVES/index.htm. Title VII of 
the Dodd-Frank Act, which amended the Commodity Exchange Act 
(``CEA'' or the ``Act''), may be cited as the Wall Street 
Transparency and Accountability Act of 2010.
    \3\ 7 U.S.C. 1 et seq.
    \4\ See Dodd-Frank Act section 728 (adding new CEA section 21, 7 
U.S.C. 24(a), to establish a registration requirement and regulatory 
regime for SDRs).
    \5\ 7 U.S.C. 24a(c)(6).
    \6\ As is discussed more fully below, CEA section 8 describes 
circumstances under which public disclosure of information in the 
Commission's possession is permitted and prohibited. As is 
particularly relevant here, CEA section 8(e) permits the Commission 
to disclose information in its possession and obtained in connection 
with the administration of the CEA, upon request, to Federal 
departments and agencies acting within the scope of their 
jurisdiction but prohibits such recipients from disclosing such 
information except in an action or proceeding under the laws of the 
United States to which the recipient, the Commission or the United 
States is a party. CEA section 8(e) further permits the Commission 
to disclose information in its possession obtained in connection 
with administration of the CEA, upon request, to any foreign futures 
authority, department, central bank and ministries, or agency of a 
foreign government or political subdivision thereof, acting within 
the scope of its jurisdiction, subject to the condition that the 
Commission is satisfied that the information will not be disclosed 
by such recipient other than in connection with an adjudicatory 
action or proceeding to which the foreign futures authority, 
department, central bank and ministries, or the foreign government 
or political subdivision or agency thereof is a party, and which is 
brought under the laws of the foreign government or its political 
subdivision, See 7 U.S.C. 12(e).
    \7\ See 7 U.S.C. 24a(c)(7). See also Commission, Final 
Rulemaking: Swap Data Recordkeeping and Reporting Requirements, 77 
FR 2136, Jan. 13, 2012 (``Data Final Rules''). The Data Final Rules 
set forth, among others, regulations governing SDR data collection 
and reporting responsibilities under part 45 of the Commission's 
regulations.
---------------------------------------------------------------------------

    As originally enacted, CEA sections 21(d)(1) and (2) of the Act 
mandated that, prior to receipt of any requested data or information 
from an SDR, a 21(c)(7) entity agree in writing to abide by the 
confidentiality requirements described in CEA section 8 and, 
separately, to indemnify the SDR and the Commission for ``any expenses 
arising from litigation relating to the information provided under 
section 8.'' \8\ Congress's repeal of the CEA section 21(d)(2) 
indemnification requirement in the FAST Act in December 2015 gave rise 
to the amendments proposed in this release.
---------------------------------------------------------------------------

    \8\ 7 U.S.C. 24a(d). As noted above, the indemnification 
requirement was stricken from CEA section 21(d) by the FAST Act. See 
Public Law 114-94, section 86001(b)(2).
---------------------------------------------------------------------------

B. Regulatory History: The Part 49 Rules and the Commission's 2012 
Interpretative Statement

1. Access to SDR Swap Data
    In 2011, the Commission adopted rules implementing CEA section 21's 
requirements for SDRs.\9\ The Commission implemented the SDR swap data 
access provisions of CEA sections 21(c)(7) and (d) by establishing 
processes by which various categories of entities could gain access to 
SDR swap data. The domestic entities enumerated in CEA section 
21(c)(7)(A)-(D),\10\ and certain others deemed by the Commission to be 
appropriate recipients of such swap data pursuant to CEA section 
21(c)(7)(E),\11\ were defined in Sec.  49.17(b)(1) of the Commission's 
regulations as ``Appropriate Domestic Regulators'' (``ADRs'').\12\
---------------------------------------------------------------------------

    \9\ Swap Data Repositories: Registration Standards, Duties and 
Core Principles; 76 FR 54538 (Sept. 1, 2011) (``SDR Final Rules''); 
see also Swap Data Repositories: Registration Standards, Duties and 
Core Principles, 75 FR 80898 (Dec. 23, 2010) (the proposed SDR Final 
Rules) (``SDR NPRM'').
    \10\ The domestic regulators enumerated in CEA section 
21(c)(7)(A)-(D) are: (A) Each appropriate prudential regulator; (B) 
the Financial Stability Oversight Council (``FSOC''); (C) the 
Securities and Exchange Commission (``SEC''); and (D) the Department 
of Justice. The term ``prudential regulator'' is defined in CEA 
section 1a(39).
    \11\ In addition to enumerating certain domestic entities to 
which an SDR must grant swap data access, CEA section 21(c)(7)(E) 
identifies as an eligible recipient of such access ``any other 
person that the Commission determines to be appropriate, including--
foreign financial supervisors (including foreign futures 
authorities); foreign central banks; foreign ministries; and other 
foreign authorities[.]'' 7 U.S.C. 24a(c)(7)(E). Pursuant to this 
authority, in rules 49.17(b)(1)(v) and (vi), the Commission 
identified any Federal Reserve Bank and the Office of Financial 
Research (``OFR''), respectively, as ``Appropriate Domestic 
Regulators.'' The Commission also defined as an ``Appropriate 
Domestic Regulator'' each prudential regulator identified in CEA 
section 1(a)(39), with respect to requests related to any such 
regulator's statutory authority. See Sec.  49.17(b)(1)(ii). The 
Commission further reserved the discretion, in Sec.  
49.17(b)(1)(vii), to recognize ``[a]ny other person the Commission 
deems appropriate'' to be an ``Appropriate Domestic Regulator.''
    \12\ Pursuant to Sec.  49.17(d)(2), ADRs with regulatory 
jurisdiction over an SDR are not required to apply for access to SDR 
data or to execute a confidentiality and indemnification agreement 
if the regulator executes an information sharing arrangement with 
the Commission and the Commission designates the regulator to 
receive direct electronic access to SDR data pursuant to CEA section 
21(c)(4). See also Sec.  49.18(c).
---------------------------------------------------------------------------

    The term ``Appropriate Foreign Regulator'' (``AFR'') \13\ was 
defined in Sec.  49.17(b)(2) as a ``Foreign Regulator'' \14\ with an 
existing memorandum of understanding (``MOU'') or similar type of 
arrangement with the Commission; no AFRs were specifically identified 
in the rule. The term ``Appropriate Foreign Regulator'' was also 
defined to include a Foreign Regulator without an existing MOU with the 
Commission, as determined by the Commission on a case-by-case basis. 
Such a Foreign Regulator was required to file with the Commission an 
application providing sufficient facts and procedures to permit the 
Commission to analyze whether the Foreign Regulator employs appropriate 
confidentiality procedures, and to satisfy the Commission that any SDR 
data accessed by the Foreign Regulator would be disclosed ``only as 
permitted by [s]ection 8(e)'' of the CEA.\15\
---------------------------------------------------------------------------

    \13\ The Commission established the category of AFRs pursuant to 
CEA section 21(c)(7)(E), which, among other things, includes a list 
of the types of foreign entities that the Commission may determine 
to be appropriate recipients of such swap data access.
    \14\ The term ``Foreign Regulator'' is defined in Sec.  
49.2(a)(5) to mean a foreign futures authority as defined in CEA 
section 1(a)(26), foreign financial supervisors, foreign central 
banks and foreign ministries.
    \15\ 17 CFR 49.17(b)(2)(i)(B).
---------------------------------------------------------------------------

    An ADR or AFR seeking access to SDR data is required by current 
Sec.  49.17(d)(1) to file an access request with the SDR certifying 
that it is acting within the scope of its jurisdiction and is required 
by current Sec.  49.17(d)(6) to execute a ``Confidentiality and 
Indemnification Agreement'' with the SDR.\16\
---------------------------------------------------------------------------

    \16\ Current Sec.  49.18(b) requires an SDR to receive such a 
Confidentiality and Indemnification Agreement from an ADR or AFR 
prior to releasing swap data to the ADR or AFR.
---------------------------------------------------------------------------

2. The Regulatory Indemnification Requirement
    In the preamble to the SDR Final Rules, the Commission acknowledged 
commenters' concerns that compliance with the statutory and regulatory 
indemnification requirements would be difficult for certain domestic 
and foreign regulators due to various home country laws and other 
regulations prohibiting such arrangements,\17\ and expressed its intent 
to continue to work to provide regulators sufficient access to SDR 
data. In this regard, the Commission outlined the circumstances under 
which it believed the indemnification provision of CEA section 21(d) 
and Sec.  49.18 would

[[Page 8371]]

not apply. The Commission explained that, under the part 49 rules, 
certain Appropriate Domestic Regulators may in some circumstances 
obtain access to swap data reported and maintained by SDRs without 
regard to the notice and indemnification requirements of CEA sections 
21(c)(7) and (d).\18\ With respect to foreign regulatory authorities, 
the Commission determined in the SDR Final Rules that swap data 
reported to and maintained by an SDR may be accessed by an AFR without 
the execution of a confidentiality and indemnification agreement when 
the AFR has supervisory authority over a Commission-registered SDR that 
is also registered with the AFR pursuant to foreign law and/or 
regulation.
---------------------------------------------------------------------------

    \17\ See SDR Final Rules at 54554. The Commission notes that, 
prior to passage of the FAST Act on December 4, 2015, no 21(c)(7) 
entity had entered into a confidentiality or indemnification 
agreement pursuant to CEA section 21(d) or the part 49 rules.
    \18\ It was, in the Commission's view, appropriate to permit 
access to the swap data maintained by SDRs to Appropriate Domestic 
Regulators that have concurrent regulatory jurisdiction over such 
SDRs, without the application of the notice and indemnification 
provisions of CEA sections 21(c)(7) and (d). See SDR Final Rules at 
54554, n163. Accordingly, pursuant to the Commission's Part 49 
rules, these provisions did not apply to an Appropriate Domestic 
Regulator that has regulatory jurisdiction over an SDR registered 
with it pursuant to a separate statutory authority that is also 
registered with the Commission, if the Appropriate Domestic 
Regulator executes an MOU or similar information sharing arrangement 
with the Commission and the Commission, consistent with CEA section 
21(c)(4)(A), designates the Appropriate Domestic Regulator to 
receive direct electronic access. See 17 CFR 49.17(d)(2).
---------------------------------------------------------------------------

    Concerns about the scope of the indemnification provision 
persisted, and in October 2012 the Commission issued an Interpretative 
Statement, which was designed to provide guidance and greater clarity 
to interested members of the public and foreign regulators with respect 
to the scope and application of CEA section 21(d) and the part 49 
rules.\19\ The Interpretative Statement clarified that a foreign 
regulatory authority's access to swap data held in a CFTC-registered 
SDR would not be subject to the confidentiality and indemnification 
provisions of CEA section 21(d) or the part 49 regulations if (i) the 
registered SDR is also registered in, or recognized or otherwise 
authorized by, the foreign authority's regulatory regime; and (ii) the 
data sought to be accessed by the foreign authority has been reported 
to the registered SDR pursuant to such foreign regulatory regime.\20\
---------------------------------------------------------------------------

    \19\ See Swap Data Repositories: Interpretative Statement 
Regarding the Confidentiality and Indemnification Provisions of the 
Commodity Exchange Act, 77 FR 65177 (Oct. 25, 2012) 
(``Interpretative Statement'').
    \20\ Interpretative Statement at 65181.
---------------------------------------------------------------------------

C. FAST Act Amendments to CEA Section 21

    Congress responded to the regulators' access concerns by including 
in the FAST Act a repeal of CEA section 21(d)(2)'s indemnification 
requirement.\21\ The confidentiality requirement in CEA section 
21(d)(1) was retained in CEA section 21(d), as amended.\22\
---------------------------------------------------------------------------

    \21\ Title LXXXVI (``Repeal of Indemnification Requirements'') 
of the FAST Act amends the CEA by:
    repeal[ing] the indemnification requirements added by the Dodd-
Frank Wall Street Reform and Consumer Protection Act for regulatory 
authorities to obtain access to swap data. Foreign regulators and 
regulatory entities have indicated concerns regarding the 
indemnification requirements of Dodd-Frank. The title removes such 
requirements so data can be shared with foreign authorities. The 
title would still require the regulatory agencies requesting the 
information to agree to certain confidentiality requirements prior 
to receiving the data.
    FAST Act: Conference Report to Accompany H.R. 22, Dec. 1, 2015 
at 486-87. The repeal applied as well to the analogous provision in 
the Securities Exchange Act of 1934, 15 U.S.C. 78m(n)(5).
    \22\ The legislation struck subsection (d) of CEA section 21 and 
inserted in its place a provision entitled, ``Confidentiality 
Agreement,'' that states that before a swap data repository may 
share information with any entity described in subsection (c)(7), 
the swap data repository shall receive a written agreement from each 
entity stating that the entity shall abide by the confidentiality 
requirements described in section 8 of the CEA relating to the 
information on swap transactions that is provided. See FAST Act, 
Public Law 114-94, 129 Stat. 1312 (Dec. 4, 2015).
---------------------------------------------------------------------------

    The FAST Act also modified CEA section 21(c)(7)(A) by specifying 
that ``swap'' data--as opposed to ``all'' data--must be provided to 
21(c)(7) entities, and added to CEA section 21(c)(7)(E)'s non-exclusive 
list of persons that the Commission may determine to be appropriate 
recipients of SDR swap data the new category ``other foreign 
authorities.''

D. CEA Section 8 Informs the Confidentiality Provisions of CEA Section 
21

    CEA section 8 governs the Commission's treatment of nonpublic 
information in its possession in a number of circumstances, and its 
disclosure restrictions and confidentiality standards expressly inform 
the access provisions of CEA sections 21(c)(7) and 21(d). As relevant 
here, CEA section 8(e) permits the Commission to furnish to the 
specified types of domestic or foreign entities--upon their request and 
acting within the scope of their jurisdiction--any information in its 
possession obtained in connection with the administration of the 
Act.\23\ CEA section 8(e) specifies, with respect to U.S. entities, 
that any information furnished thereunder shall not be disclosed except 
in an action or proceeding under the laws of the United States to which 
the entity, the Commission or the United States is a party. CEA section 
8(e) further specifies, with respect to the specified types of foreign 
entities, that the Commission shall not furnish information thereunder 
unless the Commission is satisfied that the information will not be 
disclosed by the entity except in connection with an adjudicatory 
action or proceeding to which the entity is a party brought under the 
laws to which such entity is subject.
---------------------------------------------------------------------------

    \23\ 7 U.S.C. 12(e).
---------------------------------------------------------------------------

    The principles underlying CEA section 8(e) are also fundamental to 
CEA sections 21(c)(7) and (d) and to the access standards and 
confidentiality provisions proposed in this release. In proposing 
clearer and more robust access and confidentiality standards in 
Sec. Sec.  49.17 and 49.18, the Commission is mindful of these 
foundational principles: Where information is sought to be accessed, 
the information must relate to the scope of the requesting entity's 
jurisdiction or authority; and information provided by the SDR shall 
not be further disclosed except in limited, defined circumstances.

E. Summary of Proposed Revisions to Part 49

    Pursuant to its authority under the Act,\24\ the Commission is 
proposing amendments to Sec. Sec.  49.2, 49.9, 49.17, 49.18, and 49.22 
to (i) implement the statutory changes mandated by the FAST Act 
Amendments; (ii) make certain conforming and clarifying changes related 
to such implementation; (iii) revise the process by which 
appropriateness is determined for purposes of access to SDR swap data 
and clarify the standards in connection with the Commission's 
appropriateness determinations; and (iv) establish the form and 
substance of the written agreement mandated by CEA section 21(d), as 
amended. In formulating the following proposed amendments, the 
Commission has endeavored to balance the goal of effective and 
consistent global regulation of swaps \25\ with the mandate of CEA 
sections 21(c)(7) and (d) that swap data be made available to a limited 
universe of regulators on a

[[Page 8372]]

confidential basis pursuant to CEA section 8. The proposed rules and 
rule amendments would, if adopted:
---------------------------------------------------------------------------

    \24\ See, e.g., CEA section 21(f)(4) (Additional duties 
developed by Commission), 7 U.S.C. 24a(f)(4). The Commission is also 
authorized by CEA section 8a(5), 7 U.S.C. 12a(5), to make such rules 
and regulations as, in the judgment of the Commission, are 
reasonably necessary to effectuate any of the provisions or to 
accomplish any of the purposes of the Act.
    \25\ Section 752 of the Dodd-Frank Act directs the CFTC, the SEC 
and the prudential regulators, as appropriate, to consult and 
coordinate with foreign regulatory authorities in this regard and 
provides that these entities may agree to such information-sharing 
arrangements as may be deemed necessary or appropriate in the public 
interest or for the protection of investors, swap counterparties, 
and security-based swap counterparties.
---------------------------------------------------------------------------

     Add ``other foreign authorities'' to the foreign 
regulators identified in Sec.  49.2(a)(5), consistent with the FAST 
Act's amendment to CEA section 21(c)(7)(E) to include this category 
among the entities that the Commission may deem appropriate to access 
SDR swap data;
     Amend Sec.  49.9 to make clarifying changes;
     Amend Sec.  49.17 to, among other things: (i) Delete all 
references to the indemnification requirement and/or indemnification 
agreement; (ii) establish a process and clarify the standards for 
determining whether certain entities not enumerated in Sec.  
49.17(b)(1)(i)-(vi) are appropriate to directly access swap data from 
an SDR; (iii) revise the SDR notification requirement so that SDRs 
notify the Commission only for each initial request for swap data by 
ADRs and AFRs and any subsequent request at variance with the ADR's or 
AFR's scope of jurisdiction; (iv) specify that the information 
available to ADRs and AFRs is ``swap data''--as distinguished from 
``data,'' to reflect the corresponding FAST Act amendment to CEA 
section 21; and (v) add a delegation of authority provision so that 
Commission staff is able to efficiently administer certain functions 
related to SDR swap data access;
     Amend Sec.  49.18 to, among other things: (i) Delete all 
references to the indemnification requirement and/or indemnification 
agreement; (ii) require that SDRs receive, prior to providing SDR swap 
data access to an ADR or AFR, a written confidentiality arrangement 
between the Commission and such ADR or AFR; (iii) specify the required 
elements of such written confidentiality arrangement; (iv) require SDRs 
to notify the Commission of any known failures to fulfill the terms of 
a confidentiality arrangement required by Sec.  49.18(a); (v) inform 
ADRs, AFRs and SDRs that the Commission may direct an SDR to limit, 
suspend or revoke an ADR's or AFR's access to swap data held by an SDR 
if such ADR or AFR has failed to fulfill the terms of a confidentiality 
arrangement required by Sec.  49.18(a); and (vi) add a delegation of 
authority provision so that Commission staff is able to efficiently 
administer certain functions related to SDR swap data access; and
     Amend Sec.  49.22(d)(4) to omit a reference to 
indemnification in order to conform to the corresponding FAST Act 
amendment to the CEA.

F. Rescission of 2012 Interpretative Statement

    The Commission has determined to rescind its 2012 Interpretative 
Statement. References to the indemnification requirement in the 
Interpretative Statement are no longer relevant as the indemnification 
requirement in CEA section 21(d) has been repealed by the FAST Act. 
Additionally, the modifications to Sec.  49.17(d)(3) that are proposed 
here are consistent with the clarifications provided in the 
Interpretative Statement.

II. Discussion

A. Definitions: Proposed Amendments to Sec.  49.2

    As originally adopted, Sec.  49.2(a)(5) defined the term ``foreign 
regulator'' to include a foreign futures authority as defined in CEA 
section 1a(26), foreign financial supervisors, foreign central banks 
and foreign ministries.\26\ The FAST Act amendments to the CEA added to 
subsection 21(c)(7)(E) a new category of entity--``other foreign 
authorities''--that the Commission may deem appropriate to obtain 
access to SDR swap data. The Commission proposes a corresponding 
amendment to the definition of ``foreign regulator'' in Sec.  
49.2(a)(5) to conform this definition to amended subsection 
21(c)(7)(E).
---------------------------------------------------------------------------

    \26\ 17 CFR 49.2(a)(5). CEA Section 1a(26) defines ``foreign 
futures authority'' as any foreign government, or any department, 
agency, governmental body, or regulatory organization empowered by a 
foreign government to administer or enforce a law, rule, or 
regulation as it relates to a futures or options matter, or any 
department or agency of a political subdivision of a foreign 
government empowered to administer or enforce a law, rule, or 
regulation as it relates to a futures or options matter. Section 
723(a)(2) of the Dodd-Frank Act added section 2(d) to the CEA to 
provide that enumerated provisions, including CEA section 1a, apply 
to swaps.
---------------------------------------------------------------------------

B. Domestic and Foreign Regulators With Regulatory Responsibility ) 
Over SDRs: Proposed Amendments to Sec.  49.17(d)(2) and (3)

1. The Current Rule
    Commission regulation 49.17(d)(2) of the Commission's regulations 
currently provides that an ADR with regulatory jurisdiction over an SDR 
registered with it pursuant to a separate statutory authority that is 
also registered with the Commission is not subject to the requirements 
of Sec.  49.17(d) (application and notice provisions) and Sec.  
49.18(b) (confidentiality and indemnification agreement) as long as the 
following conditions are met: (i) The ADR executes an MOU or similar 
information sharing arrangement with the Commission; and (ii) the 
Commission, consistent with CEA section 21(c)(4)(A), designates the ADR 
to receive direct electronic access. As described in the SDR Final 
Rules, the Commission provided that these ADRs may be provided access 
to the swap data reported and maintained by SDRs without being subject 
to the notice and indemnification provisions of CEA sections 21(c)(7) 
and (d).\27\
---------------------------------------------------------------------------

    \27\ See SDR Final Rules at 54554.
---------------------------------------------------------------------------

    Commission regulation 49.17(d)(3) of the Commission's regulations 
currently provides that an AFR with supervisory authority over an SDR 
registered with it pursuant to foreign law and/or regulation that is 
also registered with the Commission is not subject to the requirements 
of Sec.  49.17(d) (application and notice provisions) and Sec.  
49.18(b) (confidentiality and indemnification agreement). As described 
in the SDR Final Rules and Interpretative Statement, the Commission 
believes that confidential swap data reported to, and maintained, by an 
SDR may be appropriately accessed by an AFR without the execution of a 
confidentiality and indemnification agreement when the AFR is acting in 
a regulatory capacity with respect to an SDR that is also registered 
with the AFR and with respect to data reported to such SDR pursuant to 
such AFR's regulatory regime.\28\
---------------------------------------------------------------------------

    \28\ Id. See also Interpretative Statement at 65181; section 752 
of the Dodd-Frank Act.
---------------------------------------------------------------------------

2. Proposed Amendments
    With respect to domestic regulators with regulatory jurisdiction 
over an SDR, the Commission proposes to remove: (1) The reference to 
``Appropriate Domestic Regulator'' in Sec.  49.17(d)(2) and replace it 
with the term ``domestic regulator'' to clarify that all domestic 
regulators and not just ADRs would fall under Sec.  49.17(d)(2); (2) 
subparagraph (i) to Sec.  49.17(d)(2) (the information sharing 
arrangement condition) and (3) subparagraph (ii) to Sec.  49.17(d)(2) 
(the direct electronic access condition). Although the Commission in 
the original part 49 rules adopted the information sharing and direct 
electronic access conditions so that ADRs would not be subject to the 
then-existing confidentiality and indemnification requirements, the 
Commission through experience with SDR swap data access believes an 
additional refinement of these rules is necessary in order to promote 
greater efficiency and cooperation among domestic regulators. 
Accordingly, the Commission submits that a domestic regulator that has 
regulatory jurisdiction

[[Page 8373]]

over an SDR registered with it pursuant to a separate statutory 
authority should be able to access SDR data reported to such SDR 
pursuant to such separate statutory authority irrespective of whether 
such domestic regulator has executed an MOU or similar information 
sharing arrangement with the Commission or been designated to receive 
direct electronic access by the Commission.\29\
---------------------------------------------------------------------------

    \29\ The Commission's proposal is consistent with the principle 
previously set forth in its Interpretative Statement relating to the 
confidentiality and indemnification provisions of the CEA. In 
particular, the Commission stated ``that a foreign regulator's 
access to data from a registered SDR that is also registered, 
recognized, or otherwise authorized in a foreign jurisdiction's 
regulatory regime, where the data to be accessed has been reported 
pursuant to that [other] regulatory regime, [such access] will be 
dictated by that jurisdiction's regulatory regime and not by the CEA 
or Commission regulations.'' See Interpretative Statement at 65181.
---------------------------------------------------------------------------

    In connection with foreign regulatory authorities that have 
supervisory authority over an SDR, the Commission proposes to (i) 
remove the reference to ``Appropriate Foreign Regulator'' in Sec.  
49.17(d)(3) and replace it with the term ``Foreign Regulator'' as 
defined in Sec.  49.2 to clarify that all Foreign Regulators, not only 
those that have been determined ``appropriate'' by the Commission would 
fall under Sec.  49.17(d)(3); and (ii) add qualifying language to Sec.  
49.17(d)(3) so that Sec.  49.17(d)(3) applies not only to SDRs that are 
``registered'' with the Foreign Regulator but also to those SDRs that 
are ``registered, recognized, or otherwise authorized'' by a foreign 
jurisdiction's regulatory regime, and where such swap data has been 
reported to the SDR pursuant to the Foreign Regulator's regulatory 
regime.\30\
---------------------------------------------------------------------------

    \30\ Id.
---------------------------------------------------------------------------

    As it was when adopting the SDR Final Rules, the Commission is 
mindful of the need to protect the confidentiality of swap data when 
such data is provided to another regulator. Under the proposal, the 
Commission believes that the proposed changes to Sec.  49.17(d)(3) 
strike the appropriate balance in providing access to swap data 
consistent with the confidentiality protections set forth in the 
CEA.\31\
---------------------------------------------------------------------------

    \31\ See CEA section 21(c)(7); see also section 752 of the Dodd-
Frank Act.
---------------------------------------------------------------------------

3. Request for Comment
    The Commission requests comment on all aspects of amendments to 
Sec.  49.17(d)(2) and (3).

C. Appropriateness Determination for Foreign Regulators and Non-
enumerated Domestic Regulators: Proposed Sec.  49.17(h) and Proposed 
Amendments to Sec.  49.17(b)

1. The Current Rule
    CEA section 21(c)(7) specifies U.S. entities to which swap data 
must be released by an SDR, provided certain prerequisites are 
satisfied. Because Congress has determined that access to SDR swap data 
by these entities is appropriate when the prerequisites are satisfied, 
no further access consideration by the Commission is necessary. These 
U.S. entities, along with others determined to be appropriate by the 
Commission pursuant to CEA section 21(c)(7)(E), are identified in Sec.  
49.17(b)(1) as ``Appropriate Domestic Regulators.'' The term 
``Appropriate Domestic Regulator'' is also defined to include ``any 
other person the Commission deems appropriate.'' The current part 49 
rules do not include a process for determining that a U.S. entity not 
specifically enumerated in Sec.  49.17(b)(1) is an ``Appropriate 
Domestic Regulator.''
    Under current Sec.  49.17(b)(2)(i), in order for a Foreign 
Regulator \32\ that does not have a current MOU with the Commission to 
be determined to be an ``Appropriate Foreign Regulator,'' \33\ it must 
file with the Commission an application in the form and manner 
specified by the Commission.\34\ The application must provide 
sufficient facts and procedures to permit the Commission to analyze 
whether the Foreign Regulator's confidentiality procedures are 
appropriate and to satisfy the Commission that information provided by 
an SDR will not be disclosed by the Foreign Regulator except as 
permitted by CEA section 8(e).
---------------------------------------------------------------------------

    \32\ The term ``Foreign Regulator'' is defined in Sec.  
49.2(a)(5) to mean a foreign futures authority as defined in CEA 
section 1(a)(26), foreign financial supervisors, foreign central 
banks and foreign ministries.
    \33\ No Foreign Regulators are enumerated in CEA section 
21(c)(7) or specifically identified as Appropriate Foreign 
Regulators in Sec.  49.17(b)(2).
    \34\ To date the Commission has not specified a form and manner 
for the application referenced in current Sec.  49.17(b)(2)(i)(A).
---------------------------------------------------------------------------

2. The Proposed Amendments
    The Commission proposes to eliminate the current filing 
requirements set forth in current Sec.  49.17(b)(2)(i) and establish 
new filing requirements in proposed Sec.  49.17(h). The Commission also 
proposes to include in Sec.  49.17(h), CEA section 8-related 
confidentiality considerations and the ability for the Commission to 
revisit or reassess appropriateness determinations. The filing 
requirements proposed in new Sec.  49.17(h) would apply to all foreign 
regulators regardless of whether a current MOU or similar arrangement 
with the Commission exists, and to any domestic regulator that is not 
an ADR enumerated in Sec.  49.17(b)(1)(i)-(vi) (``Enumerated ADR''). 
Proposed Sec.  49.17(h)(3) would specify two threshold requirements for 
a finding of appropriateness: (i) The requesting entity has in place 
appropriate safeguards to maintain the confidentiality of such swap 
data; and (ii) such entity is acting within the scope of its 
jurisdiction in seeking access to swap data maintained by an SDR. These 
requirements are necessary but may or may not be sufficient to support 
an appropriateness determination: The Commission proposes to evaluate 
each filing on a case-by-case basis with reference to these and other 
factors that the Commission may find germane to its determination. If 
the Commission finds on the basis of information submitted that access 
to SDR swap data is appropriate, the Commission would issue an order 
confirming the regulator's status as an ADR or AFR and setting forth 
any conditions or limitations on access consistent with the relevant 
statutory and regulatory requirements (the proposed ``Determination 
Order''). The Commission is also proposing, through Sec.  49.17(h)(4), 
to be able to revisit, reassess, limit, suspend or revoke a previously 
issued Determination Order. The Commission believes it is necessary to 
be able to revisit an appropriateness determination, and potentially 
take one of the foregoing remedial actions, in order to be able to 
address situations that may arise subsequent to the determination, such 
as where an AFR or ADR violates the term of a Determination Order or 
fails to properly keep SDR swap data confidential.
3. The Factors Required for a Determination Order
a. Scope of Jurisdiction
    CEA section 21(c)(7) directs SDRs to provide swap data to 
regulators ``on a confidential basis pursuant to section 8.'' \35\ The 
Commission interprets this provision to require consistency with CEA 
section 8(e)'s mandate that information may be furnished, on a 
confidential basis, only to other regulators acting within the scope of 
their jurisdiction. Accordingly, the Commission believes that an 
appropriateness determination must be

[[Page 8374]]

informed by reference to the regulator's jurisdiction and to the 
entity's legitimate regulatory or legal interest in the swap data to be 
sought.
---------------------------------------------------------------------------

    \35\ 7 U.S.C. 24(c)(7).
---------------------------------------------------------------------------

    In this regard, the Commission proposes to add to part 49 new Sec.  
49.17(h)(2), which would require an applicant seeking a Determination 
Order to provide the Commission sufficient information to permit the 
Commission to conclude that the applicant would be acting within the 
scope of its jurisdiction in seeking access to swap data maintained by 
an SDR. As part of this information, the Commission expects that an 
applicant would explain the relationship between its jurisdiction and 
its request for access to swap data maintained by SDRs, including an 
explanation of the applicant's need for particular swap data to carry 
out its regulatory mandate, legal authority or responsibility.
    The Commission proposes in new Sec.  49.17(h)(3) to specify that 
the Commission will not issue a Determination Order unless it is 
satisfied that the regulator is acting within the scope of its 
jurisdiction in seeking access to SDR swap data, and that any grant of 
access will be limited to swap data appropriate to the entity's 
regulatory mandate or legal authority. Each Determination Order would 
further require, as a condition of the appropriateness determination 
set forth therein, that a regulator that has received a Determination 
Order promptly notify the Commission, and each SDR from which it has 
received swap data, of any change to its jurisdiction that would relate 
to the swap data access requested.\36\ As described in proposed Sec.  
49.17(d)(5), the Commission would be able to direct SDRs to limit, 
suspend or revoke the scope of an ADR's or AFR's SDR swap data access 
to reflect the new scope of its jurisdiction.\37\ The Commission 
expects that this proposed limitation on access will reduce the risk of 
unauthorized or unnecessary disclosures because each appropriate 
regulator will have access to swap data only to the extent necessary to 
fulfill its jurisdictional mandate or regulatory responsibility.
---------------------------------------------------------------------------

    \36\ The form of confidentiality arrangement set forth in 
proposed Appendix B to part 49 also would require such notices.
    \37\ As is relevant here, proposed Sec.  49.17(d)(5) would 
require that each SDR ``shall, as directed by the Commission, limit, 
suspend or revoke . . . such access should the Commission . . . 
direct the [SDR] to limit, suspend or revoke such access.''
---------------------------------------------------------------------------

b. Robust Confidentiality Safeguards
    CEA section 21(c)(7) is explicit in requiring that SDRs make swap 
data available on a confidential basis pursuant to CEA section 8. 
Proposed Sec.  49.17(h)(2) accordingly would require that the applicant 
submit to the Commission information sufficient to permit a 
determination that the applicant employs adequate confidentiality 
safeguards to ensure that swap data the applicant receives from an SDR 
will not be disclosed other than as permitted by the confidentiality 
arrangement required by Sec.  49.18(a). The Commission anticipates that 
this would involve the Commission considering whether the applicant's 
confidentiality protocols, system safeguards and security compliance 
procedures can be expected to ensure the confidentiality of the swap 
data, and that the applicant has in place protections sufficient to 
prevent unauthorized intrusions into the systems that maintain the swap 
data. In this regard, the Commission would also expect to consider the 
applicant's processes for limiting internal access to swap data to 
those persons with a need to know, as well as how the swap data will be 
stored and whether the swap data will be segregated from other 
information.
    It is the Commission's view that reliance on these factors strikes 
an appropriate balance between realizing the benefits of data access by 
regulators \38\ and the obligation to protect confidential information 
in accordance with the dictates of CEA section 8(e), as incorporated by 
reference in CEA section 21(c)(7) and (d) through those sections' 
incorporation of CEA section 8. The Commission considers these factors 
essential to a determination of appropriateness. Other considerations, 
while not proposed to be codified in these proposed rules, may also 
contribute to the Commission's appropriateness analysis.
---------------------------------------------------------------------------

    \38\ See CEA section 21(c)(7); see also Section 752 of the Dodd-
Frank Act (recognizing the goal of effective and consistent global 
regulation of swaps).
---------------------------------------------------------------------------

c. Additional Considerations
    Although the Commission proposes to eliminate the current 
regulatory provision conferring AFR status on a foreign regulator with 
``an existing [MOU] or other similar type of information sharing 
arrangement executed with the Commission . . ., '' \39\ it nonetheless 
continues to believe that the existence of such an arrangement fosters 
a cooperative relationship and encourages the development of shared 
understandings related to regulatory responsibilities. Although not 
dispositive, indications of a strong cooperative relationship with 
another authority, as established by the existence of such an 
arrangement and the Commission's experience working with such authority 
in finalizing and administering the arrangement, would likely be a 
factor supporting an appropriateness determination. Also, a failure to 
cooperate fully or to comply with the terms of an existing or prior 
arrangement might be expected to weigh against an appropriateness 
determination.
---------------------------------------------------------------------------

    \39\ 17 CFR 49.17(b)(2).
---------------------------------------------------------------------------

    Similarly, when assessing appropriateness, the Commission expects 
to consider whether it receives access to swap data maintained by trade 
repositories in that regulator's jurisdiction. The Commission is 
mindful of the Dodd-Frank Act's encouragement of coordination and 
cooperation with foreign regulatory authorities.\40\ The Commission 
believes that increased data access by regulators has the potential to 
provide the Commission and other authorities with more complete 
information with which to monitor risk exposures and should be expected 
to promote global market stability through enhanced regulatory 
transparency. Accordingly, Commission access to swap data maintained by 
trade repositories in such other regulator's jurisdiction, an 
arrangement prospectively to assist the Commission in obtaining data 
from other jurisdictions, and a history of assistance from a foreign 
regulator, would be viewed favorably by the Commission in considering 
appropriateness.
---------------------------------------------------------------------------

    \40\ See Dodd-Frank Act section 752, supra.
---------------------------------------------------------------------------

d. Other Matters Regarding the Determination Order Process
    The Commission preliminarily believes that the Determination Order 
process and factors discussed above offer a reasonable approach to 
providing requesting entities access to SDR swap data based on clearly 
articulated factors and any additional considerations or circumstances 
the Commission may deem relevant on a case-by-case basis. Both the 
required factors and the additional considerations support the mandate 
of CEA sections 8, 21(c)(7) and 21(d) and are consistent with the 
express intent of Congress that the Commission coordinate and cooperate 
with foreign regulatory authorities on matters related to the 
regulation of swaps. Through the issuance of Determination Orders, the 
Commission will be able to impose appropriate conditions or 
restrictions on an entity's access to SDR swap data such that the 
entity's access is linked to its jurisdictional scope. Pursuant to 
proposed Sec.  49.17(h)(4), the Commission

[[Page 8375]]

may also, in its discretion, issue a Determination Order of limited 
duration, and may otherwise limit, suspend or revoke such an order if 
the entity fails to comply with its terms or the terms of the statutory 
confidentiality arrangements. The Commission would expect SDRs to take 
into account any conditions or restrictions contained in a 
Determination Order when providing access to swap data to an ADR or 
AFR.
    The Commission further believes it is appropriate to make the 
process and factors proposed in Sec.  49.17(h) applicable to any 
domestic entities that are not enumerated as ADRs in Sec.  
49.17(b)(1)(i)-(vi), as scope of jurisdiction and confidentiality 
considerations are equally applicable to U.S. entities, and has drafted 
proposed Sec.  49.17(h) accordingly.
e. Request for Comment
    The Commission requests comment on all aspects of proposed Sec.  
49.17(h), particularly on whether the proposed regulatory and other 
factors are sufficient to determine whether access to SDR swap data is 
appropriate.
4. Proposed Amendments to Sec.  49.17(d)(4)--SDR Notice and 
Verification Obligations
    CEA section 21(c)(7) requires each SDR to notify the Commission of 
a swap data request received from an ADR or AFR.\41\ Currently, this 
statutory requirement is implemented in Sec.  49.17(d)(4)(i), which 
provides that an SDR must promptly notify the Commission regarding 
``any'' request received by an ADR or AFR to gain access to swap data 
maintained by the SDR.
---------------------------------------------------------------------------

    \41\ See CEA section 21(c)(7), 7 U.S.C. 24a(c)(7).
---------------------------------------------------------------------------

    To reduce the burden on SDRs and provide greater operational 
efficiency consistent with the intent of CEA section 21(c)(7), the 
Commission is proposing to amend the SDR notification requirement in 
current Sec.  49.17(d)(4)(i) to require an SDR to notify the Commission 
(i) at the time that it receives the first request for swap data from a 
particular ADR or AFR and (ii) at any time that a request does not 
comport with the scope of the ADR's or AFR's jurisdiction, as described 
in the confidentiality arrangement required by proposed Sec.  49.18(a). 
The proposed amendment would make the notification applicable only to 
the initial request for swap data and any subsequent request at 
variance with the ADR's or AFR's scope of jurisdiction: On receiving 
either such request for data by a particular ADR or AFR, the SDR would 
be required to provide prompt electronic notification to the Commission 
of the request, in a format specified by the Secretary of the 
Commission, pursuant to proposed Sec.  49.17(d)(4)(ii). The SDR would 
be required to keep such notification and related requests confidential 
consistent with the requirements of CEA sections 21(c)(6) and (7) and 
related regulatory requirements set forth in Sec. Sec.  49.16 and 
49.17.
    The Commission believes that the proposed approach to SDR 
notification supports the Commission's need to be aware of who is able 
to access SDR swap data and what data has been accessed, while 
eliminating potentially costly, unwieldy and inefficient notice of 
every swap data request. Under the proposal, the Commission would be 
notified that a particular ADR or AFR has requested access to SDR swap 
data and will be able to examine records of the ADR's or AFR's 
individual swap data requests, and the swap data provided, as it deems 
necessary.\42\
---------------------------------------------------------------------------

    \42\ Consistent with the current recordkeeping requirements for 
SDRs in Sec.  45.2(f), SDRs are required to maintain records of all 
information related to the initial and all subsequent requests for 
swap data from ADRs/AFRs. Appropriate records would include, at a 
minimum, the identity of the ADR/AFR accessing the swap data; the 
date, time and substance of the request for access; confirmation 
that the request is consistent with the scope of the regulator's 
jurisdiction; and copies of all swap data provided in connection 
with the request for access. Pursuant to CEA section 1.31, SDRs are 
required to maintain such records for a period of no less than five 
years after the date of such request and must provide this 
information to the Commission upon request.
---------------------------------------------------------------------------

    The Commission also proposes to amend Sec.  49.17(d)(4) by adding 
new subsection (iii) to require each SDR that receives a request for 
access to its swap data from an ADR or AFR to verify, prior to 
providing such access, that the request is consistent with the scope of 
the ADR's or AFR's jurisdiction, as described in the confidentiality 
arrangement required by proposed Sec.  49.18(a).\43\ This verification 
would need to incorporate any subsequent changes thereto. The 
Commission is also proposing to require an ADR or AFR that has executed 
a confidentiality arrangement with the Commission pursuant to Sec.  
49.18(a) and provided such confidentiality arrangement to one or more 
SDRs to notify the Commission and each such SDR of any change to such 
ADR's or AFR's scope of jurisdiction as described in such 
confidentiality arrangement. Additionally, the proposal would enable 
the Commission to direct a SDR to suspend, limit, or revoke access to 
swap data maintained by such SDR based on any such change to such ADR's 
or AFR's scope of jurisdiction, and that, if so directed, such SDR 
shall so suspend, limit, or revoke such access.
---------------------------------------------------------------------------

    \43\ The scope of jurisdiction would be described in Exhibit A 
to the form of confidentiality arrangement set forth in proposed 
Appendix B to part 49.
---------------------------------------------------------------------------

    As proposed, Sec.  49.17(d)(4)(iv) would require SDR verification 
only once with respect to a request for ongoing or recurring access to 
particular data, provided that there has not been a change in the scope 
of the regulator's jurisdiction (in which case an SDR would need to 
verify anew that the swap data requested is within the scope of the 
requesting ADR's or AFR's jurisdiction). The Commission recognizes that 
the proposed requirement imposes a burden on SDRs; however, it notes 
that SDRs are obliged by CEA section 21(c)(7) to provide access 
``pursuant to section 8'' of the CEA, which requires a jurisdictional 
nexus to the information requested. In these circumstances, the 
Commission believes SDRs must take a role in ensuring compliance with 
these statutory restrictions.
5. Proposed New Sec.  49.17(i)--Delegation of Authority
    In the interests of expedience and efficiency in determining 
appropriateness of access by regulators, the Commission proposes to 
delegate all functions reserved to the Commission in Sec.  49.17 to the 
Director of the Division of Market Oversight and to such members of the 
Commission's staff acting under his or her direction as he or she may 
designate from time to time.
6. Request for Comment
    The Commission requests comment on all aspects of the proposed 
amendments to Sec.  49.17, and particularly invites comments on:
    1. Whether commenters believe there are more cost-effective methods 
of notification and recordkeeping that would still provide the 
Commission with access to the information necessary for it to perform 
its regulatory functions in a manner consistent with CEA section 
21(c)(7); and
    2. Whether a phase-in process is necessary to decrease the 
likelihood that a large number of new demands on SDRs' systems from 
ADRs and AFRs seeking access to swap data will decrease SDR systems 
reliability, efficiency or speed.

D. CEA Section 21(d) Confidentiality Agreements: Proposed Amendments to 
Sec.  49.18

    CEA section 21(d), as amended, requires that, prior to providing 
swap data to a 21(c)(7) entity, an SDR ``shall

[[Page 8376]]

receive a written agreement from each entity stating that the entity 
shall abide by the confidentiality requirements described in CEA 
section 8 relating to the information on swap transactions that is 
provided.'' \44\ As originally adopted, the part 49 rules required that 
such confidentiality agreements be executed between the SDR and the 
21(c)(7) entity.\45\ The Commission proposes to add a new Sec.  
49.18(a) to require that a confidentiality arrangement be executed by 
and between the ADR or AFR and the Commission.\46\ Once the ADR or AFR 
and the Commission have executed a confidentiality arrangement, the ADR 
or AFR may present the executed document to any SDR from which it 
requests access to swap data in satisfaction of CEA section 21(d).
---------------------------------------------------------------------------

    \44\ See CEA section 21(d). 7 U.S.C. 24a(d) as amended by the 
FAST Act.
    \45\ See current Sec.  49.17(d)(6) and 49.18(b).
    \46\ See proposed Sec.  49.18(a) (requiring that an SDR received 
``an executed confidentiality arrangement between the Commission and 
the [ADR] or [AFR] . . . .''). The Commission notes that the SEC has 
implemented a similar approach with respect to the execution of the 
required agreement. See Access to Data Obtained by Security-Based 
Swap Data Repositories, 81 FR 60585 at 60591 and 60608 (Sept. 2, 
2016) (SEC rule 13n-4(b)(10), 17 CFR 240.13n-4(b)(10), and 
associated preamble text).
---------------------------------------------------------------------------

    The Commission recognizes that its proposed amendments to Sec.  
49.18 represent a change in approach from the part 49 rules as adopted. 
Based on its experience with SDRs and swap data access since the 
adoption of part 49 in 2011, and further consideration of the 
relationship between CEA sections 21 and 8, however, the Commission 
believes this change is consistent with the statutory framework 
established by Congress in CEA section 21(d) and 21(c)(7). Moreover, in 
the Commission's view a confidentiality arrangement between the 
Commission and the regulator more directly supports the confidentiality 
mandate of CEA section 8. Finally, the Commission believes that the 
proposed requirement will promote regulatory efficiency and reduce 
costs to SDRs, ADRs and AFRs while ensuring the confidentiality of SDR 
swap data by giving full effect to the strictures of CEA section 8(e).
    To further promote regulatory efficiency, the Commission is 
proposing to provide a form of confidentiality arrangement as Appendix 
B to Part 49, for use by ADRs and AFRs. The Commission would expect its 
use by ADRs and AFRs to reduce significantly the need for these 
entities to negotiate separate confidentiality arrangements with the 
Commission. This proposed change also would eliminate the costs and 
potential inefficiencies to SDRs inherent in requiring them to 
negotiate confidentiality agreements with a potentially large number of 
ADRs and AFRs. Finally, while its use is not required, the Commission 
believes that the proposed form of confidentiality arrangement in 
Appendix B to Part 49 can be expected to conserve its limited staff 
resources by eliminating in many cases the need for the Commission and 
its staff to develop individualized confidentiality arrangements with 
multiple ADRs or AFRs seeking access to SDR swap data.
1. Current Sec.  49.18
    The Commission adopted Sec.  49.18 to implement CEA section 
21(d)(1) and (2) as originally enacted. Accordingly, the current rule 
sets forth the obligation for SDRs to execute a ``Confidentiality and 
Indemnification Agreement'' before providing SDR swap data to an ADR or 
AFR. Congress has repealed the indemnification requirement, and the 
Commission proposes to make conforming amendments to Sec.  49.18 to 
remove references to indemnification.
    Separately, the Commission is proposing revisions to Sec.  49.18 to 
modify the substantive requirements of the confidentiality arrangement 
and the parties to the confidentiality arrangement, to establish 
conditions for restricting or revoking access to SDR swap data, and to 
clarify the confidentiality obligations of ADRs and AFRs with 
regulatory responsibility over an SDR.
2. Proposed Amendments to Sec.  49.18(a)--Confidentiality Arrangement 
Required Prior to Disclosure of Swap Data
    The Commission proposes to remove current Sec.  49.18(a) \47\ and 
add a new Sec.  49.18(a) requiring that an SDR receive a 
confidentiality arrangement, executed by the Commission and the ADR or 
AFR seeking access to the swap data maintained by the SDR, that, at a 
minimum, contains all elements described in proposed Sec.  49.18(b).
---------------------------------------------------------------------------

    \47\ Current Sec.  49.18(a) describes the purpose of Sec.  
49.18.
---------------------------------------------------------------------------

3. Proposed Amendments to Sec.  49.18(b)--Required Elements of the 
Confidentiality Arrangement
    The Commission proposes to replace the text of current Sec.  
49.18(b) \48\ with a requirement that the confidentiality arrangement 
required pursuant to Sec.  49.18(a) shall, at a minimum, include all 
elements included in the form of confidentiality arrangement set forth 
in proposed Appendix B to part 49. Paragraph 5 of the confidentiality 
arrangement would require the ADR or AFR to undertake that it will be 
acting within the scope of its jurisdiction each time it requests swap 
data from an SDR, and to promptly notify the Commission and each 
relevant SDR if the scope of the ADR's or AFR's jurisdiction changes. 
Paragraph 5 of the confidentiality arrangement also would require ADRs 
and AFRs to employ procedures to maintain the confidentiality of swap 
data and any information and analyses derived therefrom (the swap data 
and such information are referred to collectively as the ``Confidential 
Information'').
---------------------------------------------------------------------------

    \48\ Current Sec.  49.18(b) requires an SDR to receive a 
confidentiality agreement from a 21(c)(7) entity before granting the 
21(c)(7) entity access to swap data maintained by the SDR. As 
discussed above, the Commission proposes to address in proposed 
Sec.  49.18(a) the confidentiality arrangement condition to swap 
data access.
---------------------------------------------------------------------------

    Paragraph 6 of the confidentiality arrangement would require ADR 
and AFR signatories to employ the following safeguards to maintain the 
confidentiality of the Confidential Information:
     To the maximum extent practicable, maintain Confidential 
Information received from SDRs separately from other data and 
information; \49\
---------------------------------------------------------------------------

    \49\ ADRs and AFRs seeking useful guidance for Confidential 
Information segregation can look to the data segregation standards 
contained in the National Institute of Standards and Technology 
(``NIST'') Special Publication 800-53, Revision 4, Security and 
Privacy Controls for Federal Information Systems and Organizations 
(April 2013), available at http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf or in the Federal 
Information Security Management Act of 2002, as amended (``FISMA''). 
44 U.S.C. 3541. As the Commission has previously noted in a 
different context, FISMA ``is a source of cybersecurity best 
practices and also establishes legal requirements for federal 
government agencies . . . .'' System Safeguards Testing 
Requirements, 80 FR 80139, 80142 (Dec. 23, 2015) (``Registered 
Entity Cyber NPRM''). The Commission recently adopted final rules 
based on the Registered Entity Cyber NPRM. See System Safeguards 
Testing Requirements, 81 FR 64271 (Sept. 19, 2016) (``Final 
Registered Entity Cyber Rules'').
---------------------------------------------------------------------------

     Protect such Confidential Information from 
misappropriation and misuse; \50\
---------------------------------------------------------------------------

    \50\ This should include cybersecurity measures. As the 
Commission detailed in a different context in the Final Registered 
Entity Cyber Rules, ``cyber threats to the financial sector continue 
to expand.'' See Final Registered Entity Cyber Rules at 64272. See 
also System also Safeguards Testing Requirements for Derivatives 
Clearing Organizations, 80 FR 80113, 80114-80115 (Dec. 23, 2015) 
(describing escalating and evolving cybersecurity threats); 
Registered Entity Cyber NPRM at 80140-80141 (Dec. 23, 2015) 
(describing, inter alia, the current cybersecurity threat 
environment).
---------------------------------------------------------------------------

     Ensure that only ADR or AFR personnel with a need to 
access particular Confidential Information to perform their job 
functions related to such Confidential Information have access thereto 
and that such access is

[[Page 8377]]

permitted only to the minimum extent necessary to perform such job 
functions; \51\
---------------------------------------------------------------------------

    \51\ One basic principle of data security is that only those 
with a need to access data to perform their work should be granted 
access to such data. See, e.g., Framework for Improving Critical 
Infrastructure Cybersecurity at 23 (Feb. 12, 2014), available at 
http://www.nist.gov/cyberframework/upload/cybersecurity-framework-021214.pdf (characterizing the ``Protect'' element of a core 
cybersecurity framework as one where ``[a]ccess to assets and 
associated facilities is limited to authorized users, processes, or 
devices, and to authorized activities and transactions.'').
---------------------------------------------------------------------------

     Except as provided in paragraph 8 of the confidentiality 
arrangement, prevent disclosure of Confidential Information unless 
sufficiently aggregated and anonymized to prevent identification, 
through disaggregation or otherwise, of a market participant's business 
transactions, trade data, market positions, customers or 
counterparties; \52\
---------------------------------------------------------------------------

    \52\ The Commission understands that ADRs and AFRs may want to 
use aggregated and anonymized information derived from SDR swap data 
in analyses that may be made public. Cf. U.S. Gov't Accountability 
Office, GAO-16-175, Financial Regulation: Complex and Fragmented 
Structure Could Be Streamlined To Improve Effectiveness 71-75 (2016) 
(``GAO Report''), available at http://www.gao.gov/assets/680/675400.pdf (discussing the OFR's Financial Stability Monitor and 
related confidentiality issues and protections surrounding sharing 
aggregated and disaggregated information provided by other 
agencies). The Commission believes that, when properly aggregated 
and anonymized, information derived from SDR swap data generally can 
be disclosed without violating the requirement in CEA section 21(d) 
that a recipient of swap data agree, with respect to the information 
on swap transactions that is provided by an SDR, to abide by the 
confidentiality requirements described in CEA section 8. Cf. Sec.  
49.16(c) (stating that ``[s]ubject to Section 8 of the Act, [SDRs] 
may disclose aggregated swap data on a voluntary basis or as 
requested[ ] in the form and manner[ ] prescribed by the 
Commission.''); SDR Final Rules at 54551 (stating that ``the 
Commission believes that it is permissible under the Dodd-Frank Act 
and part 49 of the Commission's regulations for an SDR to disclose, 
for non-commercial purposes, data on an aggregated basis such that 
the disclosed data reasonably cannot be attributed to individual 
transactions or market participants.''). In certain cases, however, 
even aggregated information may enable a reader to determine a 
market participant's business transactions, trade secrets (e.g., 
algorithms) or positions. Thus, the proposed form of confidentiality 
arrangement requires ADRs and AFRs to implement safeguards designed 
to appropriately limit the use of information that has been 
aggregated from SDR swap data and to prevent disaggregation or other 
derivations of a market participant's business transactions, trade 
data or market positions. ADRs and AFRs can look to Sec.  
43.4(d)(1), (d)(4) and (g) for guidance on anonymization principles.
---------------------------------------------------------------------------

     Prohibit the use of Confidential Information by ADR or AFR 
personnel for any improper purpose; and
     Monitor compliance with the confidentiality safeguards and 
ensure prompt notification of the CFTC and each relevant SDR of any 
violation of the safeguards or failure to fulfill the terms of the 
confidentiality arrangement.
    Paragraph 7 of the confidentiality arrangement also would preclude, 
with limited exceptions, ADRs and AFRs from disclosing any Confidential 
Information, via onward sharing \53\ or otherwise. The only permitted 
disclosures would be (1) in actions, adjudicatory actions or 
proceedings, as applicable, described in CEA section 8(e), the 
operative language of which is included in paragraph 8 of the 
confidentiality arrangement and (2) aggregated SDR swap data that is 
anonymized to prevent identification (through disaggregation or 
otherwise) of a market participant's business transactions, trade data, 
market positions, customers or counterparties.
---------------------------------------------------------------------------

    \53\ The Commission interprets the restrictions on disclosure 
contained in CEA section 8 that are incorporated in CEA section 
21(c)(7) and 21(d) as prohibiting an ADR or AFR from onward sharing 
swap data it obtains from an SDR.
---------------------------------------------------------------------------

    Paragraph 9 of the confidentiality arrangement contains certain 
provisions requiring ADRs and AFRs to notify the Commission, and take 
certain protective actions, prior to disclosing SDR swap data even 
where an ADR or AFR receives a legally enforceable demand to disclose 
Confidential Information.
    Paragraph 11 of the confidentiality arrangement would require ADRs 
and AFRs accessing swap data from SDRs to comply with all security-
related requirements imposed by SDRs in connection with access to such 
swap data, as such requirements may be revised from time to time. 
Because, subject to specified conditions, CEA sections 21(c)(7) and 
21(d) require SDRs to provide ADRs and AFRs access to swap data, the 
Commission expects that SDRs will not impose security-related access 
requirements beyond those that are necessary to ensure the privacy and 
confidentiality of SDR swap data. The Commission further expects that 
SDRs' security-related access requirements for ADRs and AFRs would be 
akin, if not identical, to the requirements SDRs impose on others 
(e.g., the Commission, reporting counterparties) to whom SDRs provide 
swap data access.
    To further protect the confidentiality of SDR swap data, paragraph 
12 of the confidentiality arrangement would require ADR and AFR 
signatories to promptly destroy all Confidential Information for which 
they no longer have a need or which no longer falls within their scope 
of jurisdiction.\54\ While it may be the case that ADRs or AFRs will 
use some or all Confidential Information in perpetuity, if they no 
longer have a need for Confidential Information, they should destroy 
such Confidential Information to prevent its misuse. Similarly, it is 
possible that an SDR may inadvertently provide swap data outside the 
scope of an ADR or AFR's jurisdiction. In such circumstances, such swap 
data also should be destroyed immediately after the ADR or AFR 
discovers that such swap data is outside the scope of its jurisdiction.
---------------------------------------------------------------------------

    \54\ Paragraph 12 of the confidentiality arrangement would also 
require ADR and AFR signatories to certify to the CFTC, upon 
request, that they have destroyed such swap data.
---------------------------------------------------------------------------

    The proposed rule would require that the confidentiality 
arrangement must include an exhibit (Exhibit A) specifying the scope of 
jurisdiction of the ADR or AFR signatory. If such signatory is not an 
Enumerated ADR, the ADR or AFR would attach the Commission 
Determination Order described in Sec.  49.17(h) as Exhibit A to the 
confidentiality arrangement. If such signatory is an Enumerated ADR, it 
would attach, as Exhibit A to the confidentiality arrangement, a 
detailed description of its scope of jurisdiction as it relates to the 
swap data maintained by SDRs that the ADR would seek pursuant to the 
confidentiality arrangement. This requirement is designed to assist 
SDRs in determining that the scope of each swap data request is within 
the scope of the requesting entity's jurisdiction.
    While the Commission would impose certain obligations on ADRs and 
AFRs, with respect to swap data received from an SDR, in the proposed 
confidentiality arrangement, ADRs and AFRs retain the discretion to 
determine how to comply with those obligations. Additionally, to the 
extent that neither the proposal nor commenters address a relevant 
confidentiality issue that arises after an ADR or AFR commences 
accessing swap data, the Commission expects affected ADRs and AFRs to 
take appropriate measures to safeguard affected swap data and advise 
the Commission of such issue promptly so that the Commission may 
consider appropriate action.
4. Removal of Sec.  49.18(c)--ADRs and AFRs With Regulatory 
Responsibility Over an SDR
    The Commission proposes to remove current Sec.  49.18(c), which 
provides that the indemnification and confidentiality requirements 
established in Sec.  49.18(b) do not apply to certain ADRs and AFRs 
with regulatory jurisdiction or supervisory responsibilities over an 
SDR, but requires such regulators to comply with CEA section 8 and 
``any other relevant statutory confidentiality authorities.'' As noted 
above in section II.B. relating to Sec.  49.17(d)(2) and (3), the 
Commission believes that those domestic and foreign regulators that 
have regulatory responsibility over an

[[Page 8378]]

SDR should be able to access SDR data reported to such SDR pursuant to 
such other regulator's regulatory regime, without limitation. 
Therefore, the Commission submits that Sec.  49.18(c) is not 
appropriate because it requires these domestic and foreign regulators 
with regulatory responsibility over SDRs to comply with CEA section 8 
and any other relevant statutory confidentiality authorities. In 
addition, Sec.  49.17(d)(2) and (3) already provide that the 
confidentiality and indemnification requirements of Sec.  49.18(b) do 
not apply to these domestic and foreign regulators with regulatory 
responsibility over SDRs. However, insofar as a regulator sought swap 
data that was not reported to the SDR pursuant to that regulator's 
regulatory regime, the exclusions set forth within Sec.  49.17(d)(2) 
and (3) would not apply.
    The Commission accordingly submits that current Sec.  49.18(c) is 
inappropriate and unnecessary, and therefore, should be eliminated.
5. Failure to Fulfill the Terms of a Confidentiality Arrangement: 
Proposed Sec.  49.18(c) and (d)
    The Commission proposes in new Sec.  49.18(c) to require SDRs to 
promptly report to the Commission any known failure to fulfill the 
terms of a confidentiality arrangement that they receive pursuant to 
Sec.  49.18(a). Proposed new Sec.  49.18(d) would authorize the 
Commission to direct an SDR to limit, suspend or revoke an AFR's or 
ADR's access to swap data, if the Commission determines that the AFR or 
ADR has failed to fulfill the terms of its confidentiality arrangement 
with the Commission.\55\
---------------------------------------------------------------------------

    \55\ Proposed Sec.  49.18(d) provides that, if an ADR or AFR 
fails to fulfill the terms of a confidentiality arrangement under 
paragraph (a) of proposed Sec.  49.18, the Commission may direct 
each registered SDR to limit, suspend or revoke the ADR's or AFR's 
access to swap data held by the SDR Similarly, proposed Sec.  
49.17(d)(5) would require an SDR, as directed by the Commission, to 
limit, suspend or revoke an ADR's or AFR's swap data access should 
the Commission revoke the appropriateness determination for such ADR 
or AFR or otherwise direct the SDR to suspend or revoke such access.
---------------------------------------------------------------------------

6. Proposed Sec.  49.18(e)--Delegation of Authority
    The Commission is proposing to add Sec.  49.18(e)(1) to delegate to 
the Director of the Division of Market Oversight, and to such staff 
acting under his or her direction as he or she may designate from time 
to time, all functions reserved to the Commission in Sec.  49.18. 
Proposed Sec.  49.18(e)(2) would reserve to the Director of the 
Division of Market Oversight the authority to submit to the Commission 
for its consideration any matter which has been delegated to the 
Director under proposed Sec.  49.18(e)(1). The Commission proposes in 
Sec.  49.18(e)(3) to expressly permit the Commission, at its election, 
to exercise the authority delegated to the Director of the Division of 
Market Oversight under proposed Sec.  49.18(e)(1).
    This delegation is intended to conserve Commission resources and 
increase the effectiveness and efficiency of the Commission's oversight 
and supervision of SDR swap data access. The Commission anticipates 
that the delegation of authority will help facilitate timely access to 
SDR swap data by ADRs and AFRs consistent with the requirements set 
forth in part 49 of the Commission's regulations. However, the Division 
of Market Oversight may submit matters to the Commission for its 
consideration, as it deems appropriate.
7. Conforming Changes
    As a result of the FAST Act Amendments, the Commission proposes 
conforming changes to Sec.  49.17(d)(6), to delete references to an 
Indemnification Agreement. As a result of the proposed changes to Sec.  
49.18, and in particular, Sec.  49.18(a), the Commission proposes 
conforming changes to Sec.  49.22(d)(4) relating to chief compliance 
officer compliance responsibilities and duties so that the appropriate 
section reflecting the confidentiality arrangement is referenced.
8. Request for Comment
    1. The Commission requests comment on all aspects of the proposed 
amendments to Sec.  49.18. Commenters are particularly invited to 
address the proposed amendments to Sec.  49.18 relating to the 
confidentiality provisions of CEA sections 21(c)(7) and 21(d), whether 
the Commission should prescribe specific processes to govern ADR and 
AFR requests for swap data access from an SDR; and whether the 
Commission should prescribe a process to govern an SDR's treatment of 
requests for swap data access.
    2. In addition, commenters are invited to address the proposed 
rules implementing the notification requirement. In this regard, is 
there an alternative to requiring SDRs to maintain copies of all data 
they provide in connection with the data access provisions that would 
still permit the Commission to assess the SDR's ongoing compliance with 
those provisions? For example, are alternative approaches available 
such that the Commission need not require SDRs to maintain actual 
copies of all information provided pursuant to the data access 
provisions? Would such an alternative approach reduce the burdens on 
SDRs while still permitting the Commission to assess ongoing 
compliance?

E. Other Changes

    In addition to those changes discussed throughout this release, the 
Commission is proposing other changes to part 49, including a number of 
ministerial changes. The Commission proposes to amend Sec.  49.9(a)(9) 
to change the reference in Sec.  49.9(a)(9) from ``certain appropriate 
domestic regulators and foreign regulators'' to ``Appropriate Domestic 
Regulators and Appropriate Foreign Regulators'' to make clear that an 
SDR is required to provide access to swap data, pursuant to Sec.  
49.17, only to ADRs and AFRs. The Commission is proposing to make a 
number of other changes to part 49 to more consistently refer to the 
defined term ``swap data''. The Commission is proposing to modify the 
references in existing Sec. Sec.  49.9(a)(9) and 49.17(b)(2)(i) to 
``swap data or information''; the reference in existing Sec.  
49.17(d)(4)(i) to ``swaps transaction data''; and the reference in 
existing Sec.  49.17(d)(6) to ``requested data,'' to be references to 
``swap data'' as that term is defined in Sec.  49.2(a)(15). The 
Commission is proposing these changes to eliminate confusion and to 
conform part 49 to the FAST Act's amendment of CEA section 21(c)(7) to 
refer to ``swap data.''
    The Commission is also proposing to replace the reference in Sec.  
49.17(a) to ``swaps data'' with a reference to ``swap data'' and to 
replace the reference in Sec.  49.17(a) to ``Regulation'' with a 
reference to ``Sec.  49.17'' to match the format of the reference in 
Sec.  49.17(b). The Commission does not intend to effect any 
substantive changes with these proposed amendments.
    The Commission is proposing to change the references to ``swap 
transaction data'' and ``swaps transaction data'' in Sec.  49.17(c)(2) 
and 49.17(c)(3) to ``swap data'' as defined in Sec.  49.2(a)(15). The 
Commission is also proposing to change the references to ``data'' in 
Sec.  49.17(d)(5), (d)(6), (e), and (e)(1) to ``swap data'' in order to 
clarify the Commission's intent to refer to ``swap data'' within the 
meaning of Sec.  49.2(a)(15). For the same reason, the Commission is 
also proposing to add ``swap data and'' before ``information'' in Sec.  
49.17(e)(2) to conform it to Sec.  49.17(e)(1), as proposed to be 
amended.\56\ The Commission also

[[Page 8379]]

proposes to add the term ``and information'' after the term ``swap 
data'' in the second sentence of Sec.  49.17(e) so that such sentence 
is consistent with the first sentence of Sec.  49.17(e), which permits 
access by third parties to both swap data and information maintained by 
a registered SDR, subject to certain conditions.
---------------------------------------------------------------------------

    \56\ Although Sec.  49.17(e) uses the terms ``data'' and ``swap 
data'' interchangeably, the Commission intended those paragraphs to 
reference the definition of ``swap data'' and, consequently, 
believes that these do not represent a change to the Commission's 
original intent in promulgating Sec.  49.17(e). However, the term 
``swap data'' is narrower than the terms ``data'' and 
``information.'' Consequently, changing ``data'' to ``swap data'' 
arguably would narrow the scope of the confidentiality procedures 
and confidentiality arrangement required by Sec.  49.17(e)(1) and 
(2).
---------------------------------------------------------------------------

    In Sec.  49.17(f)(2), the Commission is proposing to change both 
references to ``[d]ata and information'' to ``[S]wap data and 
information'' in order to clarify, in each case, that the intended 
reference is to ``swap data'' as defined in Sec.  49.2(a)(15).
    In addition to those changes related to references to swap data, 
the Commission is also proposing to amend Sec.  49.17(b)(1)(vii) to 
change ``[a]ny other person the Commission deems appropriate[ ]'' to 
``[a]ny other person the Commission determines to be appropriate 
pursuant to the process set forth in Sec.  49.17(h)'' to match the 
language in CEA section 21(c)(7).
    Commission regulation 49.17(f)(1) currently states, ``Access of 
swap data maintained by the registered swap data repository to market 
participants is generally prohibited.'' The Commission is proposing to 
amend Sec.  49.17(f)(1) to state, ``Access by market participants to 
swap data maintained by the registered swap data repository is 
prohibited other than as set forth in Sec.  49.17(f)(2)'' in order to 
clarify its meaning. The Commission does not intend this to be a 
substantive change to Sec.  49.17(f)(1).
    Finally, the Commission is proposing several minor clarifying 
changes to Sec.  49.18(b).\57\ These changes include replacing ``the 
swap data'' with ``swap data''; replacing the ``with any Appropriate 
Domestic Regulator or Appropriate Foreign Regulator'' reference with 
``to any Appropriate Domestic Regulator or Appropriate Foreign 
Regulator''; and adding ``each'' before ``as defined in Sec.  
49.17(b)'' to reflect that both ``Appropriate Domestic Regulator'' and 
``Appropriate Foreign Regulator'' are defined terms in Sec.  49.17(b).
---------------------------------------------------------------------------

    \57\ These proposed changes appear in proposed Sec.  49.18(a).
---------------------------------------------------------------------------

III. Request for Comment

    In addition to the specific questions set forth in various sections 
above, the Commission requests comment on all aspects of the proposal, 
and particularly invites comment on the questions set forth below.
    (1) What, if any, impediments exist to accurately and cost-
effectively determining whether swap data access requests are within 
the scope of an ADR's/AFR's jurisdiction?
    (2) Are there any particular elements the Commission has proposed 
to include in the confidentiality arrangement that are unnecessary? Has 
the Commission omitted particular element(s) that should be included in 
a confidentiality arrangement?
    (3) Do SDRs maintain swap data in a manner that permits accurate 
reproduction at a later date of the results of an ADR's/AFR's request 
for swap data? If so, is it necessary for the Commission to require 
that SDRs maintain records of the results of such requests, as opposed 
to merely maintaining the details of the request?

IV. Related Matters

A. Regulatory Flexibility Act

    The Regulatory Flexibility Act (``RFA'') requires federal agencies, 
in promulgating rules, to consider the impact of those rules on small 
entities.\58\ The rules proposed herein will have a direct effect on 
the operations of SDRs and certain domestic and foreign regulators 
seeking access to swap data reported to, and maintained, by SDRs.
---------------------------------------------------------------------------

    \58\ See 5 U.S.C. 601 et seq.
---------------------------------------------------------------------------

    The Commission has previously established certain definitions of 
``small entities'' to be used by the Commission in evaluating the 
impact of its rules on small entities in accordance with the RFA.\59\ 
The Commission has previously determined that SDRs are not small 
entities for purpose of the RFA.\60\ For purposes of the Regulatory 
Flexibility Act, the definition of ``small entity'' also encompasses 
``small governmental jurisdictions,'' which in relevant part means 
governments of locales with a population of less than fifty 
thousand.\61\ Although the Commission anticipates that this proposal 
may be expected to have an economic impact on various governmental 
entities that access data pursuant to Dodd-Frank's data access 
provisions, the Commission does not anticipate that any of those 
governmental entities would be small governmental jurisdictions. 
Therefore, the Commission does not believe that this proposal will have 
a significant economic impact on a substantial number of small 
entities. Therefore, the Chairman, on behalf of the Commission, 
pursuant to 5 U.S.C. 605(b), hereby certifies that the proposed rules 
will not have a significant economic impact on a substantial number of 
small entities.
---------------------------------------------------------------------------

    \59\ See Policy Statement and Establishment of ``Small 
Entities'' for purposes of the Regulatory Flexibility Act, 47 FR 
18618 (Apr. 30, 1982) at 18618-21.
    \60\ See Part 49 Adopting Release at 54575 and Notice of 
Proposed Rulemaking: Swap Data Repositories, 75 FR 80898 (Dec. 23, 
2010) at 80926.
    \61\ 5 U.S.C. 601(5), (6).
---------------------------------------------------------------------------

B. Paperwork Reduction Act

    The proposed amendments to part 49 would result in new ``collection 
of information'' requirements within the meaning of the Paperwork 
Reduction Act of 1995 (``PRA'').\62\ An agency may not conduct or 
sponsor, and a person is not required to respond to, a collection of 
information unless it displays a currently valid Office of Management 
and Budget (``OMB'') control number. The OMB control number for the 
information collection associated with part 49 swap reporting is 3038-
0086.\63\ The Commission is seeking to revise Information Collection 
3038-0086 because the rule amendments proposed herein will impose 
information collection requirements that require approval from OMB 
under the PRA. The Commission is therefore submitting this proposal to 
OMB for review in accordance with 44 U.S.C. 3507(d) and 5 CFR 1320.11.
---------------------------------------------------------------------------

    \62\ 44 U.S.C. 3501 et seq.
    \63\ See OMB Control Number 3038-0086 (``Information Collection 
3038-0086''). The most recent revision to OMB Control Number 3038-
0086 was approved November 30, 2015 and is available at: http://www.reginfo.gov/public/do/PRAOMBHistory?ombControlNumber=3038-0086.
---------------------------------------------------------------------------

1. Summary of the Proposed Requirements
    The proposed modifications to part 49 would require SDRs to make 
swap data available to requesting entities if certain conditions are 
satisfied. These conditions include the requesting entity executing a 
confidentiality arrangement and, in some cases, receiving a 
determination order from the Commission that it is an appropriate 
entity to receive SDR swap data. The proposed modifications would also 
require SDRs to report failures to fulfill the terms of confidentiality 
arrangements to the Commission.
2. Collection of Information
    Currently, OMB Control Number 3038-0086 sets out burden estimates 
relating to a broad range of SDR obligations associated with 
registration requirements, reporting requirements, recordkeeping 
requirements, and disclosure requirements. Where the information 
collection associated with those obligations would be modified by this 
proposed rule, the Commission is proposing to revise Information

[[Page 8380]]

Collection 3038-0086 accordingly. To the extent the proposed 
modifications to part 49 introduce new information collections that 
were not previously incorporated into Information Collection 3038-0086, 
the Commission is proposing to revise Information Collection 3038-0086 
to account for the new information collections. Finally, many of the 
information collections discussed in Information Collection 3038-0086 
are not implicated or modified by the Commission's proposed revisions 
to part 49 in this release. The Commission, therefore, is not proposing 
to revise the estimated burdens associated with such information 
collections. New or revised information collections contained in these 
proposed revisions to part 49 will affect SDRs as well as entities that 
request access to SDR swap data pursuant to these provisions.
    As discussed above, the proposed modifications to part 49 set out 
in this release are intended to provide a process by which other 
authorities may obtain access to SDR swap data. The information 
collections associated with this process are intended to ensure that 
SDR swap data is only accessed by appropriate entities and that the 
confidentiality of any accessed SDR swap data is adequately protected. 
The ultimate result of this process is intended to provide other 
authorities with information to assist with the oversight of the global 
swaps market and market participants.
    ADR/AFRs. As discussed throughout this release, certain conditions 
must be satisfied before a requesting entity is permitted to access SDR 
swap data. These conditions may implicate various PRA collections and 
burdens as discussed below.
    Pursuant to Sec.  49.18(a), every requesting entity seeking access 
to SDR swap data must execute a confidentiality arrangement with the 
Commission prior to receiving access. This requirement applies to both 
those entities that are specifically enumerated as appropriate in Sec.  
49.17(b)(1) and those entities that require a determination from the 
Commission that they are appropriate entities to receive access to SDR 
swap data, regardless of whether the requesting entity is a domestic or 
foreign entity.
    In addition to executing a confidentiality arrangement, requesting 
entities that are not Enumerated ADRs will be required to seek a 
Determination Order from the Commission to have access to SDR swap 
data. Such Determination Orders will describe SDR swap data that is 
appropriate for the entity to access, based on the requesting entity's 
scope of jurisdiction. For Enumerated ADRs, the Commission is proposing 
to require that the confidentiality arrangement describe the requesting 
entity's scope of jurisdiction. The Commission believes the use of the 
form of confidentiality arrangement set out in Appendix B to part 49 
will provide an efficient means to satisfy the requirements of Sec.  
49.18(a).
    The Commission, for PRA purposes, believes that it is reasonable to 
assume that 300 total entities will seek access to SDR swap data. This 
estimate is based on the Commission's experience in receiving data 
requests from other regulators and its experience in coordinating and 
cooperating with other regulators.\64\ For PRA purposes, the Commission 
assumes there are four SDRs, which is the number of SDRs that are 
provisionally registered with the Commission. As the confidentiality 
arrangement will be between the ADR or AFR and the Commission and 
delivered to the SDR, AFRs and ADRs need not execute a separate 
confidentiality arrangement for each SDR. Accordingly, the Commission 
estimates, for PRA purposes, that the total number of confidentiality 
arrangements that will be executed under the proposed rules is 300. 
Given that the Commission will have published a form of confidentiality 
arrangement as an appendix to part 49, the Commission estimates that 
the review and execution of each confidentiality arrangement by an ADR 
or AFR will take approximately 40 hours, for a total burden of 12,000 
hours. The burden estimates associated with entering into such 
confidentiality arrangements are addressed in the proposed revised OMB 
Control Number 3038-0086.
---------------------------------------------------------------------------

    \64\ The Commission estimates that up to approximately 30 
authorities in the United States may seek to access swap data from 
SDRs. In the context of potential AFRs, the Commission believes that 
most requests will come from authorities in G20 countries, each of 
which will have no more and likely fewer than 30 authorities that 
may request swap data from SDRs. In addition, certain authorities 
from outside the G20 also may request swap data from SDRs. 
Accounting for all of these entities, the Commission estimates that 
there likely will be a total of no more than 300 relevant domestic 
and foreign authorities that may request swap data from SDRs.
---------------------------------------------------------------------------

    An entity that seeks access to SDR swap data must be considered 
appropriate by the Commission prior to that entity receiving access to 
SDR swap data. For Enumerated ADRs, there is no burden associated with 
seeking to be deemed appropriate by the Commission as they are already 
enumerated as such. Those entities that are not Enumerated ADRs will be 
required to receive a Determination Order prior to receiving access to 
SDR swap data. The process for obtaining such a Determination Order is 
set out in general terms in proposed Sec.  49.17(h) and requires the 
requesting entity to prepare and submit an application to the 
Commission. The preparation and submittal of this application 
constitutes an information collection under the PRA.
    As discussed above, the Commission believes that for PRA purposes 
it is reasonable to assume that 300 domestic and foreign entities will 
seek access to SDR swap data. Very few of these entities are 
specifically enumerated in Sec.  49.17(b)(1). The Commission estimates, 
for PRA purposes, that each such requesting entity would expend 100 
hours in connection with filing an application to receive an 
appropriateness determination, for a total initial burden of no more 
than 30,000 hours, calculated as the product of 300 domestic and 
foreign entities seeking access to SDR swap data and 100 hours per 
application). This estimate considers the relevant information that 
would be required to be provided in such an application, including 
information regarding the entity's scope of jurisdiction, mutual 
assistance provided to the Commission, and the existence of cooperation 
related to an MOU or similar information sharing arrangement with the 
Commission, as well as any other information relevant for the 
Commission's determination. This burden estimate is included in the 
Commission's proposed revisions to Information Collection 3038-0086.
    Swap Data Repositories. As discussed throughout this release, SDRs 
are required to facilitate access to SDR swap data by requesting 
entities, provided certain conditions are met. This requirement may 
implicate PRA collections and burdens, some of which are already 
addressed in the existing OMB Control Number 3038-0086, and some of 
which constitute new collections, as discussed below. Currently, the 
burden on SDRs of making data available to ADRs and AFRs is accounted 
for in OMB Control Number 3038-0086, as this is an existing obligation 
under existing Sec.  49.17(d). However, the proposed rules set out in 
this release clarify and modify the requirements imposed on SDRs in 
providing access to SDR swap data to ADRs and AFRs. Consequently the 
Commission is revising Information Collection 3038-0086 to account for 
these modifications.
    The Commission expects to limit a requesting entity's access to SDR 
swap data based on the entity's scope of jurisdiction. In connection 
with this

[[Page 8381]]

limitation, the Commission expects SDRs to incur burdens and costs 
associated with setting up access to SDR swap data that is consistent 
with an ADR or AFR's scope of jurisdiction. The Commission expects that 
each confidentiality arrangement will identify, either directly or 
through the attached Determination Order, the scope of access that is 
appropriate for a given requesting entity. The Commission expects SDRs 
to use these limitations to program their systems to reflect the scope 
of the ADR or AFR's access to SDR swap data. These limits set out in 
the confidentiality arrangement are expected to reduce the burdens on 
SDRs of assessing whether a request satisfies the relevant conditions, 
particularly with regard to whether SDR swap data relates to persons or 
activities within the requesting entity's scope of jurisdiction. The 
Commission estimates that the burden on an SDR associated with setting 
up access restrictions to match a requesting entity's scope of 
jurisdiction will include 20 hours of programmer analyst time, five 
hours of senior programming time, and one hour of attorney time, for a 
total of 26 hours. Consequently, for PRA purposes, the Commission 
estimates that each SDR would incur a total burden of 7,800 hours 
(i.e., the product of 300 entities and 26 hours of time) associated 
with setting up access for each ADR or AFR. The burdens associated with 
these permissioning requirements are addressed in proposed revised OMB 
Control Number 3038-0086.
    SDRs will also be required to provide electronic notice to the 
Commission of the first request for data from a particular requesting 
entity and promptly after receiving any request that does not comport 
with the scope of the ADR's or AFR's jurisdiction. In addition to 
notifying the Commission of the foregoing, the Commission is proposing, 
in Sec. Sec.  49.17(d)(4)(i) and (iii), to require SDRs to maintain 
records of all information related to the initial and all subsequent 
requests for data from the requesting entity. These records shall 
include, at a minimum, the identity of the requestor or person 
accessing the data; the date, time and substance of the request or 
access; and copies of all data reports or other aggregation of data 
provided in connection with the request or access. The SDR shall 
maintain this information for a period of no less than five years after 
the date of such request and shall provide this information to the 
Commission upon request.
    Currently, OMB Control Number 3038-0086 estimates burdens 
associated with various registration, reporting, recordkeeping, and 
disclosure requirements to which SDRs are subject. The proposed 
recordkeeping requirements relating to requesting entities' data 
requests constitute an information collection for PRA purposes and 
require the Commission to revise the recordkeeping burden estimates 
contained in OMB Control Number 3038-0086. The reporting and 
recordkeeping requirements proposed in this release may potentially 
impact each SDR.
    SDRs already have the ability to communicate electronically with 
the Commission and are subject to significant recordkeeping 
requirements pursuant to Sec.  49.12. Therefore, the proposed 
requirements should not result in SDRs having to incur initial costs to 
implement systems to properly notify the Commission when a requesting 
entity submits a data request for the first time that are in excess of 
what is already accounted for in OMB Control Number 3038-0086. The 
Commission estimates that initially each SDR may incur a burden of 360 
hours associated with these proposed recordkeeping requirements, for a 
total of 1,440 hours (i.e., the product of four SDRs and 360 hours). 
Additionally, the Commission estimates that each SDR would incur an 
annual burden of 280 hours associated with the recordkeeping 
requirements, for a total of 1,120 hours annually (i.e., the product of 
four SDRs and 280 hours). The burdens associated with these 
notification requirements are addressed in proposed revised Information 
Collection 3038-0086.
    Finally, current Information Collection 3038-0086 accounts for the 
costs to SDRs of executing a ``Confidentiality and Indemnification 
Agreement'' with each requesting ADR and AFR. Under the Commission's 
proposal, the SDR is no longer required to execute such an agreement 
with the ADRs or AFRs. The proposed confidentiality arrangement shall 
be between the requesting ADR or AFR and the Commission. Accordingly, 
the total burden to SDRs, as currently reflected in Information 
Collection 3038-0086, is reduced by the cost to execute such 
agreements. The reduction in burden associated with this change in the 
confidentiality agreement is addressed in proposed revised Information 
Collection 3038-0086.
3. Request for Comments on Collection
    The Commission invites the public and other Federal agencies to 
comment on any aspect of the reporting burdens discussed above. 
Pursuant to 44 U.S.C. 3506(c)(2)(B), the Commission solicits comments 
in order to: (1) Evaluate whether the proposed collection of 
information is necessary for the proper performance of the functions of 
the Commission, including whether the information will have practical 
utility; (2) evaluate the accuracy of the Commission's estimate of the 
burden of the proposed collection of information; (3) determine whether 
there are ways to enhance the quality, utility, and clarity of the 
information to be collected; and (4) minimize the burden of the 
collection of information on those who are to respond, including 
through the use of automated collection techniques or other forms of 
information technology.
    Comments may be submitted directly to the Office of Information and 
Regulatory Affairs, by fax at (202) 395-6566 or by email at 
[email protected]. Please provide the Commission with a copy 
of submitted comments so that all comments can be summarized and 
addressed in the final rule preamble. Refer to the ADDRESSES section of 
this notice of proposed rulemaking for comment submission instructions 
to the Commission. A copy of the supporting statements for the 
collections of information discussed above may be obtained by visiting 
www.RegInfo.gov. OMB is required to make a decision concerning the 
collection of information between 30 and 60 days after publication of 
this document in the Federal Register. Therefore, a comment is best 
assured of having its full effect if OMB receives it within 30 days of 
publication.

C. Cost-Benefit Considerations

1. Introduction
    As discussed in Section I, entitled ``Background and 
Introduction,'' above, Congress passed the FAST Act to facilitate 
broader access to swap data by the regulatory community. Section 
86001(b) of the FAST Act amends CEA section 21 by, among other things, 
eliminating the requirement that, as a condition of receiving 
information from SDRs, each ADR or AFR agree to indemnify the SDR and 
the Commission for any expenses arising from litigation relating to the 
information provided under CEA Section 8. The Commission is issuing 
this proposed rulemaking to enable ADRs and AFRs to access swap data, 
subject to certain safeguards designed to protect swap data from 
misappropriation or misuse, and to advise the public of the practical 
implications of the changes to the CEA made by the FAST Act. The 
Commission preliminarily believes that the proposed safeguards are 
warranted based on the incorporation by reference

[[Page 8382]]

in CEA sections 21(c)(7) and 21(d) of the strong protections of CEA 
section 8.
    CEA section 15(a) requires the Commission to consider the costs and 
benefits of its actions before promulgating a regulation under the CEA 
or issuing certain orders. CEA section 15(a) further specifies that the 
costs and benefits shall be evaluated in light of the following five 
broad areas of market and public concern: (1) Protection of market 
participants and the public; (2) efficiency, competitiveness, and 
financial integrity of futures markets; (3) price discovery; (4) sound 
risk management practices; and (5) other public interest 
considerations. The Commission considers the costs and benefits 
resulting from its discretionary determinations with respect to the CEA 
section 15(a) factors.
    As an initial matter, the Commission recognizes that there are 
benefits, discussed more fully below, for domestic and foreign 
regulators to have access to SDR swap data. Yet, there are inherent 
compromises between data access and data security. More directly, 
greater access leads to data being less secure from misappropriation or 
misuse. The Commission recognizes that there are costs associated with 
this proposed rulemaking. The Commission, however, lacks the requisite 
data and information to precisely estimate costs, in part, because the 
proposed rulemaking grants SDRs, ADRs, and AFRs discretion to implement 
the proposed regulations through alternative measures. Furthermore, the 
Commission does not know which approach SDRs, ADRs, and AFRs will take. 
As a consequence, where it is not feasible to quantify (e.g., because 
of the lack of accurate data or appropriate metrics), the Commission 
has considered the costs and benefits of this proposed rulemaking in 
qualitative terms. The Commission, nevertheless, requests that 
commenters provide any data or other information that would be useful 
in the estimation of the quantifiable costs and benefits of this 
proposed rulemaking.
2. Baseline and Proposed Rule Summary
a. Definition of Foreign Regulator--Proposed Amendment to Sec.  
49.2(a)(5)
    The status quo baseline definition for the term ``foreign 
regulator'' as defined in current Sec.  49.2(a)(5) is a ``foreign 
futures authority as defined in CEA Section 1a(26), foreign financial 
supervisors, foreign central banks and foreign ministries.'' \65\ The 
Commission is proposing to amend the term ``foreign regulator'' to add 
entities. Specifically, the Commission is adding the phrase ``other 
foreign authorities'' to the definition. This approach is consistent 
with the FAST Act's amendment to CEA section 21(c)(7)(E).
---------------------------------------------------------------------------

    \65\ 17 CFR 49.2(a)(5).
---------------------------------------------------------------------------

b. Definition of Appropriate Foreign Regulator--Proposed Amendment to 
Sec.  49.17(b)(2)
    The status quo baseline definition for the term ``Appropriate 
Foreign Regulator'' (defined in current Sec.  49.17(b)(2)) is ``those 
Foreign Regulators with an existing memorandum of understanding or 
other similar type of information sharing arrangement executed with the 
Commission and/or Foreign Regulators without an MOU as determined on a 
case-by-case basis by the Commission.'' \66\
---------------------------------------------------------------------------

    \66\ 17 CFR 49.17(b)(2).
---------------------------------------------------------------------------

    The Commission is proposing to amend current Sec.  49.17(b)(2) to 
require all ``foreign regulators'' to file an application with the 
Commission to become ``Appropriate Foreign Regulators.'' The existence 
of a current MOU or other information sharing arrangement with the 
Commission will not be dispositive to a determination of 
appropriateness. The proposed amendment would require the Commission to 
issue an order finding each foreign regulator ``appropriate.'' In this 
manner, the Commission will ensure that each ``Appropriate Foreign 
Regulator'' is acting within its scope of jurisdiction as mandated 
under CEA section 21(c)(7) through incorporation by reference of CEA 
section 8(e). The Commission believes that this proposal will provide 
greater control over the process by which foreign regulators obtain 
access to SDR swap data; specifically, it will help to ensure that only 
those foreign regulators who have a regulatory interest in SDR swap 
data can access such swap data. The limitation on swap data access 
proposed in this recommendation is expected to help reduce the risk of 
unauthorized disclosure, misappropriation or the misuse of swap data.
c. Duties of Registered SDRs--Proposed Amendments to Sec.  49.9(a)(9)
    The Commission has proposed conforming language changes to current 
Sec.  49.9(a)(9).\67\ There are no substantive changes with respect to 
costs and benefits.
---------------------------------------------------------------------------

    \67\ 17 CFR 49.9(a)(9).
---------------------------------------------------------------------------

d. Purpose of Access to SDR Data--Proposed Amendment to Sec.  49.17(a)
    The Commission has proposed conforming language changes to current 
Sec.  49.17(a).\68\ There are no substantive changes with respect to 
costs and benefits.
---------------------------------------------------------------------------

    \68\ 17 CFR 49.17(a).
---------------------------------------------------------------------------

e. Appropriate Domestic Regulator--Proposed Amendment to Sec.  
49.17(b)(vii)
    The Commission has proposed conforming language changes to current 
Sec.  49.17(b)(vii) to cross-reference the process under Sec.  
49.17(h).\69\ There are no substantive changes with respect to costs 
and benefits in proposed Sec.  49.17(b)(vii). If there are any costs or 
benefits associated with the changes in Sec.  49.17(b)(vii), they will 
be discussed in regards to the process defined under proposed Sec.  
49.17(h), which is the appropriateness-determination process.
---------------------------------------------------------------------------

    \69\ 17 CFR 49.17(b)(vii).
---------------------------------------------------------------------------

f. Domestic Regulator With Regulatory Responsibility--Proposed 
Amendment to Sec.  49.17(d)(2)
    By way of this proposed rulemaking, the Commission has explained 
that if a domestic regulator receives swap data pursuant to its 
regulatory regime, that access is not subject to CEA sections 21(c)(7) 
or 21(d), or Commission regulations Sec.  49.17(d) or Sec.  49.18.
g. Foreign Regulator With Regulatory Responsibility--Proposed Amendment 
to Sec.  49.17(d)(3)
    Foreign Regulators require data in order to fulfill their 
regulatory responsibilities. In proposed Sec.  49.17(d)(3) the 
Commission has explained that, if a foreign regulator receives swap 
data pursuant to its regulatory regime, that access is not subject to 
CEA sections 21(c)(7) or 21(d), or Sec. Sec.  49.17(d) or 49.18.
h. SDR Notification Requirement--Proposed Amendment to Sec.  
49.17(d)(4)(i) to (iv)
    Current Sec.  49.17(d)(4)(i) requires an SDR to promptly notify the 
Commission regarding any request for swap data received by Appropriate 
Domestic or Foreign Regulators.\70\ SDRs under this current regulation 
are required to notify the Commission for each and every request of an 
Appropriate Domestic or Foreign Regulator (including ongoing swap data 
requests).
---------------------------------------------------------------------------

    \70\ 17 CFR 49.17(d)(4)(i).
---------------------------------------------------------------------------

    The Commission proposes to amend current Sec.  49.17(d)(4)(i)-(ii) 
to provide that SDRs notify the Commission at the time that such SDR 
receives the initial request for swap data from a particular

[[Page 8383]]

ADR or AFR and promptly after receiving any request that does not 
comport with the scope of the ADR's or AFR's jurisdiction. Consistent 
with current recordkeeping requirements set forth in Sec.  49.12, SDRs 
are required to maintain books and records of all information related 
to the initial and any subsequent requests for swap data from an 
Appropriate Domestic or Foreign Regulator. The Commission also proposed 
electronic notification similar to the current rule requirement. In 
addition, the Commission placed a few obligations on SDRs under 
proposed Sec.  49.17(d)(4)(iii) and (iv) regarding data access to ADRs 
and AFRs, and determining an ADR's or AFR's jurisdiction.
    In addition, proposed Sec.  49.17(d)(4)(iii) requires SDRs to 
limit, suspend, or revoke an ADR's or AFR's swap data access if the 
ADR's or AFR's scope of jurisdiction changes and the Commission directs 
the ADR or AFR to limit, suspend, or revoke an ADR's or AFR's swap data 
access.
i. Timing; Limitation, Suspension or Revocation of Access--Proposed 
Amendments to Sec.  49.17(d)(5)
    The changes to the rule text in current Sec.  49.17(d)(5) make 
clear that SDRs must notify the Commission of an ADR or AFR access 
request and the receipt of a confidentiality arrangement, among other 
things. In addition, proposed Sec.  49.17(d)(5) requires SDRs to limit, 
suspend, or revoke an ADR's or AFR's swap data access if the Commission 
limits, suspends or revokes the ADR's or AFR's appropriateness 
determination or otherwise directs the ADR or AFR to limit, suspend, or 
revoke an ADR's or AFR's swap data access.
j. Confidentiality Agreement--Proposed Amendments to Sec. Sec.  
49.17(d)(6) and 49.18(a)-(f)
    Current Sec. Sec.  49.17(d)(6) and 49.18, adopted as part of the 
original part 49 rules, provide that SDRs execute a ``Confidentiality 
and Indemnification Agreement'' with a CEA section 21(c)(7) entity, 
prior to sharing swap transaction data and information.\71\ This 
Agreement is required to state that the other regulator will abide by 
the confidentiality provisions of CEA section 8 and agree to indemnify 
both the SDR and the Commission against any litigation expenses 
relating to information provided under CEA section 8. However, through 
the passage of the FAST Act, Congress has eliminated the requirement 
that certain domestic and foreign regulators execute the 
``Confidentiality and Indemnification Agreement'' prior to obtaining 
SDR swap data. More specifically, Congress amended CEA section 21(d) to 
require only the execution of a written agreement by domestic and 
foreign regulators prior to receipt of swap data from SDRs so that 
these regulators will abide by the confidentiality requirements 
described in CEA section 8.
---------------------------------------------------------------------------

    \71\ See 17 CFR 49.17(d)(6) and 49.18.
---------------------------------------------------------------------------

    The Commission proposes to amend current Sec. Sec.  49.17(d)(6) and 
49.18 to (i) reflect the FAST Act amendments to CEA sections 21(c)(7) 
and (d), and (ii) require SDRs to receive a confidentiality arrangement 
from a 21(c)(7) entity, before sharing swap data, to satisfy the 
requirements of CEA section 21(d). Unlike the current regulations, this 
confidentiality arrangement will not be executed by the SDR with the 
21(c)(7) entity, but instead would be executed by the Commission and 
the 21(c)(7) entity. The Commission proposes to provide a form of 
confidentiality arrangement attached as Appendix B to part 49. Use of 
the form would not be mandatory but would provide an efficient and 
expeditious means of fulfilling the confidentiality requirement of 
21(d) and Sec. Sec.  49.17(d) and 49.18.
k. Third-Party Service Providers--Proposed Amendments to Sec.  49.17(e)
    The Commission modified the text in current Sec.  49.17(e) for 
clarity. There are no substantive cost or benefit implications.
l. Access by Market Participants Barred--Proposed Amendment to Sec.  
49.17(f)
    The Commission modified the text in current Sec.  49.17(f) for 
clarity. There are no substantive cost or benefit implications.
m. Filing Requirements for Applicants To Be Determined Appropriate--
Proposed Amendments to Sec.  49.17(h)
    In this proposed rulemaking, the Commission has added proposed 
Sec.  49.17(h) to describe the application process for persons seeking 
an appropriateness determination. In sub-paragraph (2), the Commission 
explains that the applicant must provide sufficient detail to explain 
its jurisdiction and its confidentiality safeguards. Proposed Sec.  
49.17(h)(3) also outlines the standards by which the Commission will 
issue an appropriateness determination. Finally, the Commission 
explains in proposed Sec.  49.17(h)(4) that it reserves the right to 
``revisit, reassess, limit, suspend or revoke'' an appropriateness 
determination.
n. Delegation of Authority--Addition of Proposed Sec. Sec.  49.17(i) 
and 49.18(e)
    Current Sec. Sec.  49.17 and 49.18 do not have delegation of 
authority provisions. The Commission proposes to amend Sec. Sec.  49.17 
and 49.18 to add a delegation of authority to the Director of the 
Division of Market Oversight (``DMO'') and the Director's designee(s) 
of functions reserved to the Commission in Sec. Sec.  49.17 and 49.18. 
The delegation of Commission authority would make the process more 
effective and efficient.
o. SDR Chief Compliance Officer Duties--Proposed Amendment to Sec.  
49.22(d)(4)
    The change to current Sec.  49.22(d)(4) is the removal of the word 
``indemnification'' from the rule text. This is a conforming change to 
make the rule consistent with the FAST Act amendments.
3. Benefits
    At a high level regarding benefits, the rulemaking is expected to 
assist regulators in performing their supervisory and regulatory 
functions by providing them access to swap data, which would help 
regulators better understand the risks their regulated entities are 
assuming and the impact of such risks on the broader markets. These 
supervisory and regulatory functions may include: Monitoring and 
mitigation of systemic risk; ensuring financial stability; registration 
and oversight of financial market infrastructures; registration and 
oversight of trading venues; registration and oversight of market 
participants; central bank activities; prudential supervision; 
restructuring or resolution of infrastructures and firms; and 
regulation of cash markets, in some of which swap counterparties are 
active.
    A more granular benefit to regulators flows from the Commission's 
proposal to resolve a conflict or potential conflict between the 
Commission's Interpretative Statement and current Sec.  49.18(c). In 
the Interpretative Statement, the Commission took the view that other 
regulators who access swap data based on their own authority over SDRs 
are not subject to the swap data access-related provisions of the CEA. 
On the other hand, current Sec.  49.18(c) provides that such regulators 
are required to comply with CEA section 8 and any other relevant 
statutory confidentiality provisions. The Commission proposes to delete 
the statement in current Sec.  49.18(c) providing that other regulators 
are required to comply with CEA section 8 and any other relevant 
statutory

[[Page 8384]]

confidentiality provisions even when they access swap data based on 
their own authority over SDRs.\72\ Other regulators will benefit both 
from the clarity this action provides and by the greater ease of access 
to swap data within their jurisdiction.
---------------------------------------------------------------------------

    \72\ 17 CFR 49.18(c).
---------------------------------------------------------------------------

4. Costs
    The Commission recognizes that there are different types of costs 
associated with this proposed rulemaking. One cost is the potential 
harm to market participants and the public if swap data is misused--for 
example, inappropriately disclosed by ADRs and AFRs. Or, another 
harmful scenario might involve misappropriated data where hackers 
pilfer swap data from ADRs and AFRs to learn the positions of market 
participants so that the hackers, or other interested parties who may 
even pay for such information, scam the market. Such bad actors might 
be able to anticipate such market participants' trades and trade in 
front of them, raising swap trading costs to market participants, 
thereby reducing their profits.\73\ If the aforementioned scenario 
occurred frequently enough this might induce swap dealers to widen 
their spreads, making hedging more expensive. In turn, this might lead 
to sub-optimal business and investment strategies, as parties would be 
less willing to participate in swap markets, because it would be more 
costly. Further, the scenario posed could cause market participants to 
be concerned that their business strategies might be tipped to their 
competitors, because with stolen data, somebody might be able to infer 
their strategies from knowing their swap positions and how these 
positions change in response to relevant economic events.\74\ Such 
concerns could lead some market participants to withdraw to some extent 
from swap markets, reducing liquidity and potentially inducing them to 
use less effective hedging instruments or trading strategies in other 
markets.
---------------------------------------------------------------------------

    \73\ See, e.g., Registered Entity Cyber proposed rulemaking at 
80141 (observing that ``there has . . . been a rise in attacks by . 
. . hacktivists . . . aimed at . . . [, among other things,] theft 
of data or intellectual property . . . .''); Id. at 80189 
(Concurring Statement of Commissioner Bowen) (stating that ``our 
firms are facing an unrelenting onslaught of attacks from hackers 
with a number of motives ranging from petty fraud to international 
cyberwarfare.'').
    \74\ While the same risks of misuse and misappropriation exist 
with respect to swap data maintained at SDRs, SDRs are regulated, 
and subject to sanctions, by the Commission, whereas ADRs and AFRs 
are not.
---------------------------------------------------------------------------

    At a high level regarding costs to ADRs and AFRs, the less access 
to swap data granted to ADRs and AFRs, the less such swap data would 
help in performing ADRs' and AFRs' supervisory and other regulatory 
functions. Similarly, the more impediments to swap data access, the 
longer it would take ADRs and AFRs to use, or the less use ADRs and 
AFRs could make of, such swap data.
    At a more granular level, the Commission is proposing several new 
obligations applicable to foreign regulators and certain domestic 
regulators that will trigger costs for such regulators. The obligation 
for foreign regulators and unenumerated domestic regulators to apply 
for a Determination Order conferring AFR or ADR status so that such 
foreign regulators and unenumerated domestic regulators can receive 
access to SDR swap data will, at a minimum, require such applicants to 
dedicate personnel to drafting the application. Some applicants for ADR 
and AFR status may choose to retain outside counsel or another third 
party to draft the application, thereby incurring related costs. There 
also may be an additional cost associated with the complexity of the 
application because applicants for ADR and AFR status will have to 
explain their jurisdiction and link it to the sought swap data so that 
the Commission can provide swap data access parameters to SDRs in the 
Determination Orders.\75\ While applicants will need to expend 
resources developing their ``appropriateness'' applications, the 
Commission expects that the requirements and guidance it has provided 
in the proposed rulemaking should reduce such expenditures to a certain 
extent. Nonetheless, such expenditures will depend on the particulars 
of a given applicant. Because the Commission lacks sufficient knowledge 
of the specific characteristics of the applicants, among other things, 
the Commission is unable to quantify these expenditures at this time.
---------------------------------------------------------------------------

    \75\ Enumerated domestic regulators also will have to 
demonstrate to the Commission the scope of their jurisdiction so 
that SDRs will know the contours of the swap data access they can 
provide to enumerated domestic regulators.
---------------------------------------------------------------------------

    The proposed requirement in Sec.  49.18(a) that SDRs receive an 
executed confidentiality arrangement from an ADR or AFR before the SDR 
can provide the ADR or AFR swap data is based on a corresponding 
requirement set forth in CEA section 21(d) and will generate costs to 
ADRs and AFRs. CEA section 21(d) does not specify any details of the 
required written agreement other than that it must state that the ADR 
or AFR shall abide by CEA section 8's confidentiality requirements. The 
Commission, however, is proposing, in Appendix B to this part 49, to 
specify required elements as well as a form of confidentiality 
arrangement providing for ADRs and AFRs to implement a number of 
safeguards that would impose burdens on ADRs and AFRs. The 
confidentiality arrangement would include safeguards that:
     To the maximum extent practicable, maintain Confidential 
Information separately from other data and information;
     Protect Confidential Information from misappropriation and 
misuse;
     Ensure that only ADR or AFR personnel with a need to 
access particular Confidential Information to perform their job 
functions related to such Confidential Information have access thereto 
and that such access is permitted only to the minimum extent necessary 
to perform such job functions;
     Prevent disclosure of aggregated Confidential Information 
unless anonymized to prevent identification, through disaggregation or 
otherwise, of a market participant's business transactions, trade data, 
market positions, customers or counterparties;
     Prohibit the use of Confidential Information by ADR or AFR 
personnel for any improper purpose, including in connection with 
trading for their personal benefit or for the benefit of others or with 
respect to any commercial or business purpose;
     Monitor compliance with the confidentiality safeguards and 
ensure prompt notification of the CFTC and each relevant SDR of any 
violation of the safeguards or failure to fulfill the terms of the 
confidentiality arrangement;
     Prohibit the onward sharing or disclosing of Confidential 
Information unless exempted in paragraphs 6(d) or 8 of the 
confidentiality arrangement;
     Notify the CFTC in writing prior to complying with any 
legally enforceable demand for Confidential Information and assert all 
available appropriate legal exemptions or privileges with respect to 
such Confidential Information, and use its best efforts to protect the 
confidentiality of the Confidential Information; and
     Promptly destroy all Confidential Information for which an 
ADR or AFR no longer has a need or for which the information no longer 
falls within the scope of its jurisdiction, and certify to the CFTC, 
upon request, that the ADR or AFR has destroyed such Confidential 
Information.
    The Commission preliminarily believes that the monetary costs of 
these burdens would be minor, and the other costs of complying with 
these burdens, such as the costs to develop policies,

[[Page 8385]]

procedures and safeguards, are within the scope of ADRs' and AFRs' 
expertise.\76\ Given that ADRs and AFRs can elect not to seek access to 
swap data from SDRs and that ADRs and AFRs who do seek such access have 
some control over the manner in which they seek to access such swap 
data, ADRs and AFRs themselves can influence to some degree the costs 
they impose on themselves by seeking access to swap data from SDRs.
---------------------------------------------------------------------------

    \76\ The Commission believes that potential ADRs and AFRs would 
likely have established safeguards to protect sensitive data other 
than swap data and that such safeguards could be adapted to address 
the requirements of the proposed form of confidentiality arrangement 
without great cost.
---------------------------------------------------------------------------

    The proposed rulemaking would prohibit ADRs and AFRs from onward 
sharing Confidential Information with other parties. This could impose 
some costs in that ADRs and AFRs would not be able to freely share swap 
data among themselves. This could reduce the utility of the swap data 
to ADRs and AFRs, possibly reducing the effectiveness thereof. In 
addition, the fact that the Commission is proposing not to specify a 
particular means of ADRs and AFRs accessing swap data could result in 
SDRs providing a means of access other than a means preferred by ADRs 
and AFRs. This might impose additional costs to ADRs and AFRs relative 
to the potentially lesser costs of their preferred means of access. 
Because of these uncertainties, the Commission is unable to quantify 
these costs but is able to identify such costs generally.
    For SDRs, providing swap data access to so many potential ADRs and 
AFRs may be expensive. For example, SDRs may be forced to purchase new 
servers, hire new system administrators to oversee the new swap data/
system usage and troubleshoot related problems that may arise. New 
recordkeeping requirements would require more system resources. The 
proposed requirement to limit the swap data provided to ADRs and AFRs 
to only swap data that is within the scope of ADRs' and AFRs' 
jurisdiction may cause SDRs to elect to create new methods for parsing 
swap data to comply with the proposed requirement to so limit swap 
data. The proposed reporting obligations also will increase SDRs' 
costs, although to the extent that such reporting obligations are not 
triggered, such cost increases would be tempered accordingly. 
Nevertheless, SDRs presumably would need to incur some costs to develop 
policies and procedures, and build out systems, to monitor potential 
events that would trigger the proposed new reporting requirements.
    Other SDR costs will include those related to SDRs verifying that 
each access request by an ADR or AFR is within the scope of the ADR's 
or AFR's jurisdiction. This will require SDRs to expend resources to 
ensure that they do not improperly disclose to an ADR or AFR swap data 
that such ADR or AFR is not entitled to see, in violation of CEA 
section 21(c)(7)'s requirement that SDRs disclose swap data to ADRs and 
AFRs ``on a confidential basis pursuant to [CEA] section 8 . . . .'' 
\77\ By stating that SDRs shall not provide ADRs or AFRs with swap data 
access unless such swap data is within the scope of a requesting ADR's 
or AFR's jurisdiction as described and appended to the confidentiality 
arrangement required by proposed Sec.  49.18(a), proposed Sec.  
49.17(d)(4)(iii) would narrow the scope of the sources SDRs must 
consult to determine the ADR's or AFR's scope of jurisdiction. The 
Commission anticipates that narrowing the scope of the sources that 
SDRs must review to determine an ADR's or AFR's scope of jurisdiction 
would limit the resources SDRs must expend to verify the scope of an 
ADR's or AFR's jurisdiction. The Commission also anticipates that lists 
of ADRs' and AFRs' regulated entities' legal entity identifiers 
(``LEIs'') and uniform product identifiers (``UPIs'') of swaps within 
the scope of ADRs' and AFRs' jurisdiction would limit the resources 
SDRs must expend to verify whether swap data access requests are within 
the scope of an ADR's or AFR's jurisdiction--if ADRs and AFRs choose to 
develop such lists--which the Commission anticipates they would.
---------------------------------------------------------------------------

    \77\ The need for these resource expenditures would flow from 
proposed Sec.  49.17(d)(4)(iii), which would preclude SDRs from 
granting ADRs or AFRs access to swap data unless the SDR has 
determined that such swap data is within the then-current scope of 
such ADRs' or AFRs' jurisdiction.
---------------------------------------------------------------------------

    The Commission understands that there are some blank data entries 
in LEI fields, however, despite the Commission having designated an LEI 
system in 2012, and masked LEIs in a number of cases to reflect certain 
other jurisdictions' privacy law limits on disclosure.\78\ In addition, 
UPIs are still evolving for many swap contracts. Specifically, UPIs are 
in widespread use for standardized swaps but less so for other swaps. 
In cases where there is no UPI for a class of swaps, Sec.  45.7(c)(2) 
requires SDRs to create a UPI for such class and requires SDRs, all 
other registered entities and swap counterparties to use such SDR UPI-
equivalent contract identifiers to classify swaps. In such cases, ADRs 
and AFRs could use SDRs' UPI-equivalents to identify swaps within the 
scope of ADRs' and AFRs' jurisdiction.
---------------------------------------------------------------------------

    \78\ See, e.g., DMO No-Action Letter 16-03 (Jan. 15, 2016), 
available at http://www.cftc.gov/idc/groups/public/@lrlettergeneral/documents/letter/16-03.pdf, for further information regarding such 
privacy law restrictions.
---------------------------------------------------------------------------

    In general, the blank or masked LEI data fields and UPI limits 
discussed above would raise the costs for SDRs and potentially for ADRs 
and AFRs. Inadequate data fields and UPIs hinder SDRs' abilities to 
identify transactions and determine whether such transactions, in 
particular swap data, are within an ADR's or AFR's jurisdictional scope 
and interest. Even though the Commission believes these obstacles would 
increase costs, the Commission also believes that such costs are 
difficult to quantify at this time. The Commission specifically 
requests comment on this concern. Commenters are encouraged to quantify 
such costs, if practical. The Commission understands that lists of LEIs 
of ADRs' and AFRs' regulated entities and lists of UPIs or UPI-
equivalents of swaps within ADRs' and AFRs' jurisdiction may have to be 
updated from time to time as regulated entities move in and out of 
ADRs' and AFRs' jurisdiction, ADRs' and AFRs' jurisdiction expands or 
contracts, swaps evolve, and new swaps are developed. In these cases, 
for example, an ADR or AFR likely would have to modify periodically the 
list of LEIs and UPIs it gives to SDRs.
    The proposal would further mitigate the costs to SDRs by permitting 
them to verify the scope of an ADR's or AFR's jurisdiction just once 
for a recurring request the details of which do not change. SDRs might 
incur additional costs, however, if the scope of jurisdiction changes 
for an ADR or AFR. Such additional costs include some fraction of the 
above costs as well as the cost to notify the Commission of the change 
in jurisdiction for the ADR or AFR.
    The Commission is proposing Appendix B to Part 49 to provide a form 
of confidentiality arrangement for execution by the Commission and by 
ADRs and AFRs seeking swap data access maintained by SDRs so that ADRs 
and AFRs can satisfy the confidentiality agreement requirement set 
forth in CEA Sec.  21(d). The Commission believes that this form would 
eliminate SDRs' costs and reduce ADRs' and AFRs' costs to negotiate the 
terms of such an arrangement relative to an alternative of negotiating 
and signing confidentiality arrangements with four separate SDRs. 
Otherwise, confidentiality arrangement costs could be substantial in 
terms of management

[[Page 8386]]

attention and expenditures.\79\ The Commission expects that reviewing 
and signing a confidentiality arrangement would not require substantial 
expenditures, but request public comments on such costs.\80\ Commenters 
are encouraged to quantify where practical.
---------------------------------------------------------------------------

    \79\ Nevertheless, proposed Sec.  49.18(a) would allow ADRs and 
AFRs to negotiate an alternative to the proposed form, provided that 
such alternative contains the elements required in proposed Sec.  
49.18(b), which, in turn, requires that such alternative contain all 
the elements of the proposed form.
    \80\ The Commission has on occasion used the SIFMA Report on 
Management and Professional Earnings in the Securities Industry to 
estimate these kinds of costs. For instance, on page 279 of the 
SIFMA Report for 2013, the mean salary for a compliance attorney is 
$100,840 with an average bonus of $26,666. This gives $127,506 in 
average total compensation for a compliance attorney. This number is 
divided by 1,800 hours and multiplied by 5.35 to account for 
overhead to get approximately $379 per hour. Next, multiplying by 
12,000 burden hours (from the Paperwork Reduction Act section of 
this release) results in approximately $4,500,000 in estimated 
costs.
---------------------------------------------------------------------------

    The Commission is proposing to permit SDRs to determine the means 
by which they will provide access to swap data to ADRs and AFRs. The 
Commission notes that SDRs already provide the Commission and the 
National Futures Association with data. Providing incremental access to 
ADRs and AFRs may permit SDRs to take advantage of economies of scale, 
thus mitigating SDRs' costs. The proposal would also mitigate SDRs' 
costs by permitting them to choose the means by which they will provide 
access to swap data to ADRs and AFRs. The Commission expects that SDRs 
would choose the lowest cost means of access consistent with their 
statutory obligation to provide ADRs and AFRs access to swap data and 
other constraints. The Commission cannot forecast what these costs 
would be at this time, however, because it depends on particulars of 
each SDR that the Commission does not know. Consequently, the 
Commission welcomes public comments on this requirement and how SDRs 
might satisfy this requirement. Commenters are encouraged to quantify 
where practical.
    CEA section 21(c)(7) requires SDRs to notify the Commission of 
requests for data from a particular ADR or AFR. Proposed Sec.  
49.17(d)(4)(i) would reduce that burden by permitting SDRs to notify 
the Commission only of the first such request by each ADR or AFR and 
promptly after receiving any request that does not comport with the 
scope of the ADR's or AFR's jurisdiction. In addition to the foregoing, 
the Commission is proposing to amend current Sec.  49.17(d)(4)(i) to 
require SDRs to maintain records of all information related to the 
initial and all subsequent requests for data from the requesting 
entity. The SDR would have to maintain this information for the same 
period required for other SDR records. Although these costs may be 
relatively small, the Commission anticipates using such data to, for 
example, monitor ADRs' and AFRs' access requests from time to time to 
ensure that they remain within the scope of their jurisdiction and, 
relatedly, to ensure that SDRs have been monitoring this access issue.
    As one alternative to proposing comprehensive swap data safeguards, 
the Commission instead could have chosen to merely delete the 
indemnification references in its regulations. While that approach 
could have avoided imposing many of the costs to ADRs, AFRs, and SDRs 
related to protection of confidentiality discussed herein, it would 
have dramatically increased the risk of imposing on market participants 
and the public the costs discussed above in the first paragraph of this 
section IV.C.4. and below in section IV.C.5.a.-c., which the Commission 
preliminarily believes is inconsistent with the historical importance 
Congress and the Commission have placed on protecting information 
covered by CEA section 8. Consequently, the Commission has determined 
to take the proposed approach.
5. Consideration of CEA Section 15(a) Factors
a. Protection of Market Participants and the Public
    The Commission is proposing a number of safeguards to prevent 
market participants' swap data maintained at SDRs from being 
misappropriated or misused, as discussed above. Those proposed 
safeguards include: Modifying the requirements for being an AFR; 
requiring both ADRs and AFRs to demonstrate the scope of their swap-
data jurisdiction as a limit on the swap data to which an ADR or AFR 
may have access; having the Commission issue Determination Orders; 
imposing on ADRs and AFRs seeking access to swap data maintained by 
SDRs a number of required confidentiality safeguards; barring onward 
sharing of swap data; certain recordkeeping and reporting requirements; 
and ensuring the Commission's ability to revoke an ADR's or AFR's swap 
data access. Some market participants, and the public, could be harmed 
if market participants' proprietary swap data were misappropriated or 
misused. As detailed above in the ``Cost'' discussion, there is the 
potential harm that misappropriated swap data could be used to front 
run market participants whose swap data were misappropriated, raising 
their costs of completing swap transactions. More specifically, spreads 
could widen, which could deter some market participants from engaging 
in swap transactions trading and prevent prices from adjusting as 
quickly. Another possible misuse of market participants' swap data is 
if those who obtained misappropriated swap data were to reverse 
engineer the trading strategies of the market participants whose data 
were misappropriated and use such strategies, potentially undermining 
their efficacy.
b. Efficiency, Competitiveness, and Financial Integrity of Futures 
Markets
    The Commission believes that there will be little effect on 
efficiency, competiveness, and financial integrity of futures markets 
if swap data is properly protected from being misappropriated or 
misused. If swap data is not properly protected, however, competition 
might be affected, in that market participants might be less willing to 
engage in swap transactions if parties are trading in front of them, 
raising their costs, or misappropriating their trading strategies, 
lowering such strategies' effectiveness. This could induce some swap 
dealers to charge higher fees (explicitly or implicitly) for their 
services and otherwise reduce profits. Such concerns may also encourage 
market participants to increase their use of futures contracts relative 
to swaps, because futures position data may be better protected.
c. Price Discovery
    The Commission believes that price discovery would not be affected 
by this proposed rulemaking. There may be some indirect effects on 
price discovery if the safeguards in this proposed rulemaking prove 
ineffective, however. Price discovery could be negatively impacted if 
position data is misappropriated or misused to the disadvantage of some 
participants. For instance, as previously explained, some market 
participants might withdraw from swaps markets if they fear that their 
position data will be misappropriated or misused. This could lead to 
less frequent trading as well as reduced liquidity in swap markets. 
Furthermore, spreads could widen due to front-running concerns, which 
could make prices more volatile and harm price discovery.

[[Page 8387]]

d. Sound Risk Management Practices
    This proposed rulemaking will help regulators better understand the 
risks posed by their regulated entities. Without swaps data, it is 
impossible to comprehensively supervise entities that engage in swap 
trading. In this way, the proposed rulemaking helps to mitigate 
systemic risk. Allowing more ADRs and AFRs to access SDR swap data 
establishes the potential to improve SDR data by potentially 
facilitating research and analysis that ultimately leads to better risk 
management by market participants. This can occur through academic 
research that influences market participants to improve their risk 
management based on the research, or by ADRs and AFRs asserting their 
authority over their regulated entities to compel them to improve their 
swap data reporting and risk management.
e. Other Public Interest Considerations
    The Commission does not believe that there are any other public 
interest considerations with respect to this proposed rulemaking.
6. Request for Comment
    The Commission requests comment on all aspects of its cost and 
benefit considerations. Commenters are encouraged to quantify their 
comments, if practical.

D. Antitrust Considerations

    CEA section 15(b) requires the Commission to take into 
consideration the public interest to be protected by the antitrust laws 
and endeavor to take the least anticompetitive means of achieving the 
objectives of the CEA, in issuing any order or adopting any Commission 
rule or regulation.
    The Commission does not anticipate that the proposed amendments to 
part 49 will result in anticompetitive behavior. However, because the 
proposed amendments affect existing SDR procedures relating to data 
reporting validation and data accuracy, the Commission encourages 
comments from the public on any aspect of the proposal that may have 
the potential to be inconsistent with the antitrust laws or be 
anticompetitive in nature.

List of Subjects in 17 CFR Part 49

    Access to swap data; Commodity Exchange Act section 8; 
Confidentiality; Registration and regulatory requirements; Swap data 
repositories.

    For the reasons stated in the preamble, the Commodity Futures 
Trading Commission proposes to amend 17 CFR part 49 as set forth below:

PART 49--SWAP DATA REPOSITORIES

0
1. The authority citation for part 49 is revised to read as follows:

    Authority:  7 U.S.C. 12a and 24a, unless otherwise noted.

0
2. In Sec.  49.2, revise paragraph (a)(5) to read as follows:


Sec.  49.2  Definitions.

    (a) * * *
    (5) Foreign Regulator. The term ``foreign regulator'' means a 
foreign futures authority as defined in Section 1a(26) of the Act, 
foreign financial supervisors, foreign central banks, foreign 
ministries and other foreign authorities.
* * * * *
0
3. In Sec.  49.9, revise paragraph (a)(9) to read as follows:


Sec.  49.9  Duties of registered swap data repositories.

    (a) * * *
    (9) Upon request of Appropriate Domestic Regulators and Appropriate 
Foreign Regulators, provide access to swap data held and maintained by 
the swap data repository, as prescribed in Sec.  49.17;
* * * * *
0
4. Amend Sec.  49.17 as follows:
0
a. Revise paragraphs (a), (b)(1)(vii), (b)(2), (c)(2) and (c)(3), 
(d)(2) through (d)(6), and (e) and (f); and
0
b. Add paragraphs (h) and (i).
    The revisions and additions to read as follows:


Sec.  49.17  Access to SDR data.

    (a) Purpose. This section provides a procedure by which the 
Commission, other domestic regulators and foreign regulators may obtain 
access to the swap data held and maintained by registered swap data 
repositories. Except as specifically set forth in this section, the 
Commission's duties and obligations regarding the confidentiality of 
business transactions or market positions of any person and trade 
secrets or names of customers identified in Section 8 of the Act are 
not affected.
    (b) * * *
    (1) * * *
    (vii) Any other person the Commission determines to be appropriate 
pursuant to the process set forth in Sec.  49.17(h).
    (2) Appropriate Foreign Regulator. The term ``Appropriate Foreign 
Regulator'' shall mean those Foreign Regulators the Commission 
determines to be appropriate pursuant to the process set forth in Sec.  
49.17(h).
* * * * *
    (c) * * *
    (2) Monitoring tools. A registered swap data repository is required 
to provide the Commission with proper tools for the monitoring, 
screening and analyzing of swap data, including, but not limited to, 
Web-based services, services that provide automated transfer of data to 
Commission systems, various software and access to the staff of the 
swap data repository and/or third-party service providers or agents 
familiar with the operations of the registered swap data repository, 
which can provide assistance to the Commission regarding data structure 
and content. These monitoring tools shall be substantially similar in 
analytical capability as those provided to the compliance staff and the 
Chief Compliance Officer of the swap data repository.
    (3) Authorized users. The swap data provided to the Commission by a 
registered swap data repository shall be accessible only by authorized 
users. The swap data repository shall maintain and provide a list of 
authorized users in the manner and frequency determined by the 
Commission.
    (d) * * *
    (2) Domestic regulator with regulatory responsibility over a swap 
data repository. When a swap data repository that is registered with 
the Commission pursuant to this chapter is also registered with a 
domestic regulator pursuant to a separate statutory authority, and such 
domestic regulator seeks access to swap data that has been reported to 
such swap data repository pursuant to the domestic regulator's 
regulatory regime, such access is not subject to the requirements of 
sections 21(c)(7) or 21(d) of the Act, or of Sec. Sec.  49.17(d) or 
49.18.
    (3) Foreign Regulator with regulatory responsibility over a swap 
data repository. When a swap data repository that is registered with 
the Commission pursuant to this chapter is also registered with, or 
recognized or otherwise authorized by, a Foreign Regulator that has 
supervisory authority over such swap data repository pursuant to 
foreign law and/or regulation, and such Foreign Regulator seeks access 
to swap data that has been reported to such swap data repository 
pursuant to the Foreign Regulator's regulatory regime, such access is 
not subject to the requirements of sections 21(c)(7) or 21(d) of the 
Act, or of Sec. Sec.  49.17(d) or 49.18.
    (4) Obligations of the registered swap data repository in 
connection with appropriate domestic regulator or appropriate foreign 
regulator requests for data access. (i) A registered swap data 
repository shall notify the

[[Page 8388]]

Commission promptly after receiving an initial request from an 
Appropriate Domestic Regulator or Appropriate Foreign Regulator to gain 
access to swap data maintained by such swap data repository and 
promptly after receiving any request that does not comport with the 
scope of the ADR's or AFR's jurisdiction, as described and appended to 
the confidentiality arrangement required by Sec.  49.18(a). Each 
registered swap data repository shall maintain records thereafter, 
pursuant to Sec.  49.12, of the details of such initial request and of 
all subsequent requests by such Appropriate Domestic Regulator or 
Appropriate Foreign Regulator for such access.
    (ii) The registered swap data repository shall notify the 
Commission electronically, in a format specified by the Secretary of 
the Commission, of the receipt of a request specified in Sec.  
49.17(d)(4)(i).
    (iii) The registered swap data repository shall not provide an 
Appropriate Domestic Regulator or Appropriate Foreign Regulator access 
to swap data maintained by the swap data repository unless the swap 
data repository has determined that the swap data to which the 
Appropriate Domestic Regulator or Appropriate Foreign Regulator seeks 
access is within the then-current scope of such Appropriate Domestic 
Regulator's or Appropriate Foreign Regulator's jurisdiction, as 
described and appended to the confidentiality arrangement required by 
Sec.  49.18(a). An Appropriate Domestic Regulator or Appropriate 
Foreign Regulator that has executed a confidentiality arrangement with 
the Commission pursuant to Sec.  49.18(a) and provided such 
confidentiality arrangement to one or more swap data repositories shall 
notify the Commission and each such swap data repository of any change 
to such Appropriate Domestic Regulator's or Appropriate Foreign 
Regulator's scope of jurisdiction as described in such confidentiality 
arrangement. The Commission may direct a swap data repository to 
suspend, limit, or revoke access to swap data maintained by such swap 
data repository based on any such change to such Appropriate Domestic 
Regulator's or Appropriate Foreign Regulator's scope of jurisdiction, 
and, if so directed, such swap data repository shall so suspend, limit, 
or revoke such access.
    (iv) The registered swap data repository need not make the 
determination required pursuant to Sec.  49.17(d)(4)(iii) more than 
once with respect to a recurring swap data request. If such request 
changes, the swap data repository must make a new determination 
pursuant to Sec.  49.17(d)(4)(iii).
    (5) Timing; limitation, suspension or revocation of swap data 
access. Once a registered swap data repository has--
    (i) Notified the Commission, pursuant to Sec.  49.17(d)(4)(i) and 
(ii), of an initial request for swap data access by an Appropriate 
Domestic Regulator or Appropriate Foreign Regulator, as applicable, 
that was submitted pursuant to Sec.  49.17(d)(1);
    (ii) Received from such Appropriate Domestic Regulator or 
Appropriate Foreign Regulator a confidentiality arrangement executed by 
the Commission and such Appropriate Domestic Regulator or Appropriate 
Foreign Regulator as required by Sec.  49.18(a); and
    (iii) Satisfied its obligations under Sec.  49.17(d)(4)(iii), such 
swap data repository shall provide access to the requested swap data; 
provided, however, that such swap data repository shall, as directed by 
the Commission, limit, suspend or revoke such access should the 
Commission limit, suspend or revoke the appropriateness determination 
for such Appropriate Domestic Regulator or Appropriate Foreign 
Regulator or otherwise direct the swap data repository to limit, 
suspend or revoke such access.
    (6) Confidentiality arrangement. Consistent with Sec.  49.18(a), 
the Appropriate Domestic Regulator or Appropriate Foreign Regulator 
shall, prior to receiving access to any requested swap data, execute a 
confidentiality arrangement with the Commission consistent with the 
requirements set forth in Sec.  49.18(b).
    (e) Third-party service providers to a registered swap data 
repository. Access to the swap data and information maintained by a 
registered swap data repository may be necessary for certain third 
parties that provide various technology and data-related services to a 
registered swap data repository. Third-party access to the swap data 
and information maintained by a swap data repository is permissible 
subject to the following conditions:
    (1) Both the registered swap data repository and the third party 
service provider shall have strict confidentiality procedures that 
protect swap data and information from improper disclosure.
    (2) Prior to a registered swap data repository granting access to 
swap data or information to a third-party service provider, the third-
party service provider and the registered swap data repository shall 
execute a confidentiality agreement setting forth minimum 
confidentiality procedures and permissible uses of the swap data and 
information maintained by the swap data repository that are equivalent 
to the privacy procedures for swap data repositories outlined in Sec.  
49.16.
    (f) Access by market participants--(1) General. Access by market 
participants to swap data maintained by the registered swap data 
repository is prohibited other than as set forth in Sec.  49.17(f)(2).
    (2) Exception. Swap data and information related to a particular 
swap that is maintained by the registered swap data repository may be 
accessed by either counterparty to that particular swap. However, the 
swap data and information maintained by the registered swap data 
repository that may be accessed by either counterparty to a particular 
swap shall not include the identity or the legal entity identifier (as 
such term is used in part 45 of this chapter) of the other counterparty 
to the swap, or the other counterparty's clearing member for the swap, 
if the swap is executed anonymously on a swap execution facility or 
designated contract market, and cleared in accordance with Commission 
regulations in Sec. Sec.  1.74, 23.610, and 37.12(b)(7) of this 
chapter.
* * * * *
    (h) Appropriateness determination process. (1) Each person seeking 
an appropriateness determination pursuant to this paragraph shall file 
an application with the Commission.
    (2) Each applicant seeking an appropriateness determination shall 
provide sufficient detail in its application to permit the Commission 
to analyze whether the applicant is acting within the scope of its 
jurisdiction in seeking access to swap data maintained by a registered 
swap data repository, and whether the applicant employs appropriate 
confidentiality safeguards to ensure that any swap data such applicant 
receives from a registered swap data repository will not, except as 
allowed for in the form of confidentiality arrangement set forth in 
Appendix B of this part, be disclosed.
    (3) If the Commission determines that an applicant pursuant to this 
paragraph is, conditionally or unconditionally, appropriate for 
purposes of CEA section 21(c)(7), the Commission shall issue an order 
setting forth its appropriateness determination. The Commission shall 
not determine that an applicant pursuant to this paragraph is 
appropriate unless the Commission is satisfied that--
    (i) The applicant employs appropriate confidentiality safeguards to 
ensure that any swap data such applicant receives from a registered 
swap data repository

[[Page 8389]]

will not be disclosed, except as allowed for in the form of 
confidentiality arrangement set forth in Appendix B of this part and
    (ii) Such applicant is acting within the scope of its jurisdiction 
in seeking access to swap data from a registered swap data repository.
    (4) The Commission reserves the right, in connection with any 
appropriateness determination with respect to an Appropriate Domestic 
Regulator or Appropriate Foreign Regulator, to revisit, reassess, 
limit, suspend or revoke such determination consistent with the Act.
    (i) Delegation of authority relating to certain matters in this 
section. (1) The Commission hereby delegates, until such time as the 
Commission orders otherwise, the following functions to the Director of 
the Division of Market Oversight and to such members of the 
Commission's staff acting under his or her direction as he or she may 
designate from time to time: All functions reserved to the Commission 
in this section.
    (2) The Director of the Division of Market Oversight may submit any 
matter which has been delegated under paragraph (i)(1) of this section 
to the Commission for its consideration.
    (3) Nothing in this section may prohibit the Commission, at its 
election, from exercising the authority delegated under paragraph 
(i)(1) of this section.
0
5. Revise Sec.  49.18 to read as follows:


Sec.  49.18  Confidentiality arrangement.

    (a) Confidentiality arrangement required prior to disclosure of 
swap data by a registered swap data repository to an Appropriate 
Domestic Regulator or Appropriate Foreign Regulator. Prior to a 
registered swap data repository providing access to swap data to any 
Appropriate Domestic Regulator or Appropriate Foreign Regulator, each 
as defined in Sec.  49.17(b), the swap data repository shall receive, 
pursuant to Section 21(d) of the Act, an executed confidentiality 
arrangement between the Commission and the Appropriate Domestic 
Regulator or Appropriate Foreign Regulator, as applicable, in the form 
set forth in Appendix B of this part or, at a minimum, containing the 
elements required in paragraph (b) of this section, from such 
Appropriate Domestic Regulator or Appropriate Foreign Regulator. Such 
confidentiality arrangement must include, either as Exhibit A to the 
form set forth in Appendix B of this part or similarly appended, a 
description of the Appropriate Domestic Regulator's or Appropriate 
Foreign Regulator's jurisdiction. Once a registered swap data 
repository is notified that a confidentiality arrangement received from 
an Appropriate Domestic Regulator or Appropriate Foreign Regulator no 
longer is in effect, the swap data repository shall not provide access 
to swap data to such Appropriate Domestic Regulator or Appropriate 
Foreign Regulator.
    (b) Elements of confidentiality arrangement. The confidentiality 
arrangement required pursuant to paragraph (a) of this section shall, 
at a minimum, include all elements included in the form of 
confidentiality arrangement set forth in Appendix B of this part.
    (c) Reporting failures to fulfill the terms of a confidentiality 
arrangement. A registered swap data repository shall immediately report 
to the Commission any known failure to fulfill the terms of a 
confidentiality arrangement that it receives pursuant to paragraph (a) 
of this section.
    (d) Failures to fulfill the terms of the confidentiality 
arrangement. The Commission may, if an Appropriate Domestic Regulator 
or Appropriate Foreign Regulator fails to fulfill the terms of a 
confidentiality arrangement described in paragraph (a) of this section, 
direct each registered swap data repository to limit, suspend or revoke 
such Appropriate Domestic Regulator's or Appropriate Foreign 
Regulator's access to swap data held by such swap data repository.
    (e) Delegation of authority relating to certain matters in this 
section. (1) The Commission hereby delegates, until such time as the 
Commission orders otherwise, the following functions to the Director of 
the Division of Market Oversight and to such members of the 
Commission's staff acting under his or her direction as he or she may 
designate from time to time: All functions reserved to the Commission 
in this section.
    (2) The Director of the Division of Market Oversight may submit any 
matter which has been delegated under paragraph (e)(1) of this section 
to the Commission for its consideration.
    (3) Nothing in this section may prohibit the Commission, at its 
election, from exercising the authority delegated under paragraph 
(e)(1) of this section.
0
6. In Sec.  49.22, revise paragraph (d)(4) to read as follows:


Sec.  49.22  Chief compliance officer.

* * * * *
    (d) * * *
    (4) Taking reasonable steps to ensure compliance with the Act and 
Commission regulations in this chapter relating to agreements, 
contracts, or transactions, and with Commission regulations in this 
chapter under Section 21 of the Act, including confidentiality 
arrangements received by the chief compliance officer's registered swap 
depository pursuant to Sec.  49.18(a);
* * * * *
0
7. Add Appendix B to part 49, to read as follows:

Appendix B to Part 49--Confidentiality Arrangement for Appropriate 
Domestic Regulators and Appropriate Foreign Regulators To Obtain Access 
To Swap Data Maintained by Registered Swap Data Repositories Pursuant 
to Sec. Sec.  49.17(d)(6) and 49.18(a)

[[Page 8390]]

[GRAPHIC] [TIFF OMITTED] TP25JA17.088

The U.S. Commodity Futures Trading Commission (``CFTC'') and the 
[name of foreign/domestic regulator (``ABC'')] (each an 
``Authority'' and collectively the ``Authorities'') have entered 
into this Confidentiality Arrangement (``Arrangement'') in 
connection with [whichever is applicable] [CFTC Regulation 
49.17(b)(1)[(i)-(vi)]/the determination order issued by the CFTC to 
[ABC] (``Order'')] and any request for swap data by [ABC] to any 
swap data repository (``SDR'') registered with the CFTC.

Article One: General Provisions

    1. ABC is permitted to request and receive swap data directly 
from a registered SDR (``Swap Data'') on the terms and subject to 
the conditions of this Arrangement.
    2. This Arrangement is entered into to fulfill the requirements 
under Section 21(d) of the Commodity Exchange Act (``Act'') and CFTC 
Regulation 49.18. Upon receipt by a registered SDR, this Arrangement 
will satisfy the requirement for a written agreement pursuant to 
Section 21(d) of the Act and CFTC Regulation 49.17(d)(6). This 
Arrangement does not apply to information that is [reported to a 
registered SDR pursuant to [ABC]'s regulatory regime where the SDR 
also is registered with [ABC] pursuant to separate statutory 
authority, even if such information also is reported pursuant to the 
Act and CFTC regulations][reported to a registered SDR pursuant to 
[ABC]'s regulatory regime where the SDR also is registered with, or 
recognized or otherwise authorized by, [ABC], which has supervisory 
authority over the repository pursuant to foreign law and/or 
regulation, even if such information also is reported pursuant to 
the Act and CFTC regulations.] \1\
---------------------------------------------------------------------------

    \1\ The first bracketed paragraph will be used for ADRs; the 
second will be used for AFRs. The inapplicable paragraph will be 
deleted.
---------------------------------------------------------------------------

    3. This Arrangement is not intended to limit or condition the 
discretion of an Authority in any way in the discharge of its 
regulatory responsibilities or to prejudice the individual 
responsibilities or autonomy of any Authority.
    4. This Arrangement does not alter the terms and conditions of 
any existing arrangements.

Article Two: Confidentiality of Swap Data

    5. ABC will be acting within the scope of its jurisdiction in 
requesting Swap Data and employs procedures to maintain the 
confidentiality of Swap Data and any information and analyses 
derived therefrom (collectively, the ``Confidential Information''). 
ABC undertakes to notify the CFTC and each relevant SDR promptly of 
any change to ABC's scope of jurisdiction.
    6. ABC undertakes to treat Confidential Information as 
confidential and will employ safeguards that:
    a. To the maximum extent practicable, identify the Confidential 
Information and maintain it separately from other data and 
information;
    b. Protect the Confidential Information from misappropriation 
and misuse;
    c. Ensure that only authorized ABC personnel with a need to 
access particular Confidential Information to perform their job 
functions related to such Confidential Information have access 
thereto, and that such access is permitted only to the extent 
necessary to perform their job functions related to such particular 
Confidential Information;
    d. Prevent the disclosure of aggregated Confidential 
Information; provided, however, that ABC is permitted to disclose 
any sufficiently aggregated Confidential Information that is 
anonymized to prevent identification, through disaggregation or 
otherwise, of a market participant's business transactions, trade 
data, market positions, customers or counterparties;
    e. Prohibit use of the Confidential Information by ABC personnel 
for any improper purpose, including in connection with trading for 
their personal benefit or for the benefit of others or with respect 
to any commercial or business purpose; and
    f. Include a process for monitoring compliance with the 
confidentiality safeguards described herein and for promptly 
notifying the CFTC, and each SDR from which ABC has received Swap 
Data, of any violation of such safeguards or failure to fulfill the 
terms of this Arrangement.
    7. Except as provided in Paragraphs 6.d. and 8, ABC will not 
onward share or otherwise disclose any Confidential Information.
    8. ABC undertakes that:
    a. If a department, central bank, or agency of the Government of 
the United States, it will not disclose Confidential Information 
except in an action or proceeding under the laws of the United 
States to which it, the CFTC, or the United States is a party;
    b. If a department or agency of a State or political subdivision 
thereof, it will not disclose Confidential Information except in 
connection with an adjudicatory action or proceeding brought under 
the Act or the laws of [name of either the State or the State and 
political subdivision] to which it is a party; or
    c. If a foreign futures authority or a department, central bank, 
ministry, or agency of a foreign government or subdivision thereof, 
or any other Foreign Regulator, as defined in Commission Regulation 
49.2(a)(5), it will not disclose Confidential Information except in 
connection with an adjudicatory action or proceeding brought under 
the laws of [name of country, political subdivision, or (if a 
supranational organization) supranational lawmaking body] to which 
it is a party.
    9. Prior to complying with any legally enforceable demand for 
Confidential Information, ABC will notify the CFTC of such demand in 
writing, assert all available appropriate legal exemptions or 
privileges with respect to such Confidential Information, and use 
its best efforts to protect the confidentiality of the Confidential 
Information.
    10. ABC acknowledges that, if it does not fulfill the terms of 
this Arrangement, the CFTC may direct any registered SDR to suspend 
or revoke ABC's access to Swap Data.
    11. ABC will comply with all applicable security-related 
requirements imposed by an SDR in connection with access to Swap 
Data maintained by the SDR, as such requirements may be revised from 
time to time.
    12. ABC will promptly destroy all Confidential Information for 
which it no longer has a need or which no longer falls within the 
scope of its jurisdiction, and will certify to the CFTC, upon 
request, that ABC has destroyed such Confidential Information.

Article Three: Administrative Provisions

    13. This Arrangement may be amended with the written consent of 
the Authorities.
    14. The text of this Arrangement will be executed in English, 
and may be made available to the public.
    15. On the date this Arrangement is signed by the Authorities, 
it will become effective and may be provided to any registered SDR 
that holds and maintains Swap Data that falls within the scope of 
ABC's jurisdiction.

[[Page 8391]]

    16. This Arrangement will expire 30 days after any Authority 
gives written notice to the other Authority of its intention to 
terminate the Arrangement. In the event of termination of this 
Arrangement, Confidential Information will continue to remain 
confidential and will continue to be covered by this Arrangement.
    This Arrangement is executed in duplicate, this ___day of ___.
-----------------------------------------------------------------------

[name of Chairman]
Chairman
U.S. Commodity Futures Trading Commission

-----------------------------------------------------------------------
[name of signatory]
[title]
[name of foreign/domestic regulator]

[Exhibit A: Description of Scope of Jurisdiction. If ABC is not 
enumerated in Commission Regulations 49.17(b)(1)(i)-(vi), it must 
attach the Determination Order received from the Commission pursuant 
to Commission Regulation 49.17(h). If ABC is enumerated in 
Commission Regulations 49.17(b)(1)(i)-(vi), it must attach a 
sufficiently detailed description of the scope of ABC's jurisdiction 
as it relates to Swap Data maintained by SDRs.]

    Issued in Washington, DC, on January 13, 2017, by the 
Commission.
Christopher J. Kirkpatrick,
Secretary of the Commission.

    Note:  The following appendices will not appear in the Code of 
Federal Regulations.

Appendices to Proposed Amendments to the Swap Data Access Provisions of 
Part 49 and Certain Other Matters--Commission Voting Summary and 
Chairman's Statement

Appendix 1--Commission Voting Summary

    On this matter, Chairman Massad and Commissioners Bowen and 
Giancarlo voted in the affirmative. No Commissioner voted in the 
negative.

Appendix 2--Statement of Chairman Timothy G. Massad

    The increased reporting of data on swaps transactions is an 
important reform of the derivatives markets agreed to by the G20 
leaders in 2009. Today, thanks to this reporting, regulators across the 
globe are in a better position to assess exposures and risks related to 
this market. Because of the global nature of the market, it is critical 
for regulators to be able to share information, subject to appropriate 
confidentiality and other protections.
    That's why I am pleased we are issuing this proposal, which will 
make it easier for other regulators, both domestic and foreign, to gain 
access to swap data repository (SDR) swap data. The proposal would 
conform our rules to various changes Congress made in the law and 
provide a process for sharing of information. Among other things, 
Congress removed a requirement that another regulator must indemnify 
both the Commission and the swap data repository for expenses related 
to litigation before data could be shared. To date, no domestic or 
foreign regulator has provided such an indemnification. Today's 
proposal removes this requirement in the CFTC's own rules, makes other 
changes consistent with Congressional action, and creates a process for 
when and how other regulators gain access to SDR information that will 
protect confidentiality.
    I thank my fellow Commissioners Bowen and Giancarlo for their 
unanimous support for this proposal. I also thank the hardworking CFTC 
staff for all their efforts.
[FR Doc. 2017-01287 Filed 1-24-17; 8:45 am]
BILLING CODE 6351-01-P