Article 15
Due diligence
When selecting and appointing a third party to whom safekeeping functions are to be delegated in accordance with Article 22a of Directive 2009/65/EC, a depositary shall exercise all due skill, care and diligence to ensure that entrusting financial instruments to that third party provides an adequate standard of protection. The depositary shall at least:
assess the regulatory and legal framework, including country risk, custody risk and the enforceability of the contract entered into with that third party. That assessment shall in particular enable the depositary to determine the implications of a potential insolvency of the third party for the assets and rights of the UCITS;
ensure that the assessment of the enforceability of the contractual provisions referred to in point (a), where the third party is located in a third country, is based on the legal advice of a natural or legal person independent from the depositary or that third party;
assess whether the third party's practice, procedures and internal controls are adequate to ensure that the assets of the UCITS are subject to a high standard of care and protection;
assess whether the third party's financial strength and reputation are consistent with the tasks delegated. That assessment shall be based on information provided by the potential third party as well as other data and information;
ensure that the third party has the operational and technological capabilities to perform the delegated safekeeping tasks with a high degree of protection and security.
A contract by which the depositary appoints a third party to hold assets of that depositary's UCITS clients in custody, shall contain at least the following provisions:
a guarantee of the depositary's right to information, inspection, and access to the relevant records and financial instruments accounts of the third party holding assets in custody to enable the depositary to fulfil its oversight and due diligence obligations and in particular allow the depositary to:
identify all entities within the custody chain;
verify that the quantity of the identified financial instruments recorded in the financial instruments accounts opened in the depositary's books in the name of the UCITS or in the name of the management company acting on behalf of the UCITS matches the quantity of the identified financial instruments held in custody by the third party for that UCITS as recorded in the financial instruments account opened in the third party's books;
verify that the quantity of the identified financial instruments, which are registered and held in a financial instruments account opened at the issuer's Central Securities Depository (‘CSD’) or its agent, in the name of the third party on behalf of its clients, matches the quantity of the identified financial instruments recorded in the financial instruments accounts opened in the depositary's books in the name of each of its UCITS clients or in the name of the management company acting on behalf of the UCITS;
details of equivalent rights and obligations agreed between the third party and another third party, in the event of a further delegation of custody functions.
A depositary shall exercise all due skill, care and diligence in the periodic review and ongoing monitoring to ensure that the third party continues to comply with the criteria provided for in paragraph 2 and the conditions set out in points (a) to (e) of paragraph 3 of Article 22a of Directive 2009/65/EC, and shall at least:
monitor the third party's performance and its compliance with the depositary's standards;
ensure that the third party exercises a high standard of care, prudence and diligence in the performance of its safekeeping tasks and in particular that it effectively segregates the financial instruments in line with the requirements of Article 16 of this Regulation;
review the custody risks associated with the decision to entrust the assets to the third party and without undue delay notify the management company, or the investment company of any change in those risks. That assessment shall be based on information provided by the third party and other data and information. During market turmoil or when a risk has been identified, the frequency and the scope of the review shall be increased;
monitor compliance with the prohibition laid down in paragraph 7 of Article 22 of Directive 2009/65/EC;
monitor compliance with the prohibition laid down in Article 25 of the Directive 2009/65/EC and the requirements laid down in Articles 21 to 24 of this Regulation.