1.   Crowdfunding service providers shall, when relying on a third party for the performance of operational functions, take all reasonable steps to avoid additional operational risk.

2.   Outsourcing of operational functions referred to in paragraph 1 shall not impair the quality of the crowdfunding service providers’ internal control and the ability of the competent authority to monitor the crowdfunding service providers’ compliance with this Regulation.

3.   Crowdfunding service providers shall remain fully responsible for compliance with this Regulation with respect to the outsourced activities.