Article 10
Outsourcing
Where outsourcing takes place, the administrator shall ensure that the following conditions are fulfilled:
the service provider has the ability, capacity, and any authorisation required by law, to perform the outsourced functions, services or activities reliably and professionally;
the administrator makes available to the relevant competent authorities the identity and the tasks of the service provider that participates in the benchmark determination process;
the administrator takes appropriate action if it appears that the service provider may not be carrying out the outsourced functions effectively and in compliance with applicable law and regulatory requirements;
the administrator retains the necessary expertise to supervise the outsourced functions effectively and to manage the risks associated with the outsourcing;
the service provider discloses to the administrator any development that may have a material impact on its ability to carry out the outsourced functions effectively and in compliance with applicable law and regulatory requirements;
the service provider cooperates with the relevant competent authority regarding the outsourced activities, and the administrator and the relevant competent authority have effective access to data related to the outsourced activities, as well as to the business premises of the service provider, and the relevant competent authority is able to exercise those rights of access;
the administrator is able to terminate the outsourcing arrangements where necessary;
the administrator takes reasonable steps, including contingency plans, to avoid undue operational risk related to the participation of the service provider in the benchmark determination process.