Article 17 5

(a)

take all reasonable measures to protect property and records in the possession of the ESG rating provider from fraud, theft or misuse, taking into account the nature, scale and complexity of the ESG rating provider’s business and the nature and range of its ESG rating activities;

(b)

do not share confidential information that has been entrusted to the ESG rating provider with anyone who is not directly involved in the provision of ESG rating activities, including rating analysts and employees of any person directly or indirectly linked to the ESG rating provider by control, and any other natural person whose services are or have been placed at the disposal of, or are under the control of, any person directly or indirectly linked to the ESG rating provider by control;

(c)

do not use or share confidential information for any other purpose than the provision of ESG rating activities, including for the trading of financial instruments; and

(d)

do not solicit or accept money, gifts or favours from anyone with whom the ESG rating provider does business.