TITLE II BENCHMARK INTEGRITY AND RELIABILITY

CHAPTER 1 Governance of and control by administrators

Article 10Outsourcing

1.An administrator shall not outsource functions in the provision of a benchmark in such a way as to impair materially the administrator's control over the provision of the benchmark or the ability of the relevant competent authority to supervise the benchmark.

2.Where an administrator outsources to a service provider functions or any relevant services and activities in the provision of a benchmark, the administrator shall remain fully responsible for discharging all of the administrator's obligations under this Regulation.

3.Where outsourcing takes place, the administrator shall ensure that the following conditions are fulfilled:

(a)the service provider has the ability, capacity, and any authorisation required by law, to perform the outsourced functions, services or activities reliably and professionally;

(b)the administrator makes available to the relevant competent authorities the identity and the tasks of the service provider that participates in the benchmark determination process;

(c)the administrator takes appropriate action if it appears that the service provider may not be carrying out the outsourced functions effectively and in compliance with applicable law and regulatory requirements;

(d)the administrator retains the necessary expertise to supervise the outsourced functions effectively and to manage the risks associated with the outsourcing;

(e)the service provider discloses to the administrator any development that may have a material impact on its ability to carry out the outsourced functions effectively and in compliance with applicable law and regulatory requirements;

(f)the service provider cooperates with the relevant competent authority regarding the outsourced activities, and the administrator and the relevant competent authority have effective access to data related to the outsourced activities, as well as to the business premises of the service provider, and the relevant competent authority is able to exercise those rights of access;

(g)the administrator is able to terminate the outsourcing arrangements where necessary;

(h)the administrator takes reasonable steps, including contingency plans, to avoid undue operational risk related to the participation of the service provider in the benchmark determination process.