Directive 2009/138/EC of the European Parliament and of the CouncilShow full title

Article 38 Supervision of outsourced functions and activities

1. Without prejudice to Article 49, Member States shall ensure that insurance and reinsurance undertakings which outsource a function or an insurance or reinsurance activity take the necessary steps to ensure that the following conditions are satisfied:

(a) the service provider must cooperate with the supervisory authorities of the insurance and reinsurance undertaking in connection with the outsourced function or activity;

(b) the insurance and reinsurance undertakings, their auditors and the supervisory authorities must have effective access to data related to the outsourced functions or activities;

(c) the supervisory authorities must have effective access to the business premises of the service provider and must be able to exercise those rights of access.

2. The Member State where the service provider is located shall permit the supervisory authorities of the insurance or reinsurance undertaking to carry out themselves, or through the intermediary of persons they appoint for that purpose, on-site inspections at the premises of the service provider. The supervisory authority of the insurance or reinsurance undertaking shall inform the appropriate authority of the Member State of the service provider prior to conducting the on-site inspection. In the case of a non-supervised entity the appropriate authority shall be the supervisory authority.

The supervisory authorities of the Member State of the insurance or reinsurance undertaking may delegate such on-site inspections to the supervisory authorities of the Member State where the service provider is located.