Amid concerns for privacy, proportionality and reciprocity, on 11 February 2010, the European Parliament (EP) rejected the provisional agreement between the EU and the US on data transfers via the SWIFT network (SWIFT Agreement), thus rendering the SWIFT Agreement void.

The EP concurrently asked the Commission and the Council to initiate work on a long-term agreement with the US that complies with the Lisbon Treaty requirements, in particular, the Charter of Fundamental Rights. It repeated the principles it had set out in an earlier resolution with regard to data protection where it has been resolved that data should be gathered "only for the purposes of fighting terrorism" and reiterated that "the right balance" must be struck between security measures and the protection of civil liberties. The resolution calls for "the same judicial redress mechanisms as would apply to data held within the EU, including compensation in the event of unlawful processing of personal data".

Despite the vote, the EU and the US continue to share financial data to fight terrorism under a Mutual Legal Assistance agreement that allows for exchange of data within the framework of EU member states national law.

On 16 September 2009, the European Parliament and the Council adopted Regulation (EC) No 1060/2009 on credit rating agencies (Regulation). The Regulation addresses the important influence credit rating agencies have for the functioning of the financial markets and the fact that, so far, their activities have not been regulated in most EU member states.

The Regulation aims at:

It applies to credit ratings issued by credit rating agencies registered in the EU and which are disclosed publicly or distributed by subscription.

The obligation for credit rating agencies acting in the EU to be registered is itself a new requirement introduced by the Regulation. This is one of the central elements of the Regulation, along with an obligation to provide certain information and a new prohibition on advising the same companies that the individual rating agency also rates.

The Regulation does not intend to create a general obligation for financial instruments to be rated under the Regulation nor a ban on investing in securities which are not rated under the Regulation. However, it asks for prospectuses to contain clear and prominent information on whether or not the any rating quoted in the prospectus has been issued by a credit rating agency established in the EU and registered under the Regulation.

While these substantial changes brought by the Regulation apply without implementation into national law, the German government has now agreed on a draft act to appoint a responsible authority and adapt German law to the requirements of the Regulation (Act). This will happen by amending the Securities Trade Act (Wertpapierhandelsgesetz) (WpHG).

The Act names the Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht) (BaFin) as the responsible authority in Germany for the supervising rating agencies for the time being; BaFin has also been responsible for the supervision of banks, insurance companies and securities trading. However, the reasons for the Act envisage a transfer of the responsibility for supervising rating agencies to the European Securities and Markets Authority (ESMA) once it is established.

In furtherance of the Regulation, the Act will allow BaFin to perform special audits with or without specific cause to supervise compliance with the Regulation.

Apart from that, rating agencies will be under an obligation to have their compliance with the requirements of the Regulation audited on a yearly basis by an auditor instructed by BaFin.

The Act also contains numerous provisions intended to safeguard the rating agencies' compliance with the Regulation by declaring violations against many of the obligations set out in the Act as regulatory offences. Violations can be punished if committed intentionally or recklessly (leichtfertig) and carry a fine of up to EUR1 million.

The German Government expects the Act to enter into force by 7 June 2010.