46. When using a TPSP, financial entities should at least ensure that: a. they can take and …

When using a TPSP, financial entities should at least ensure that:

• a. they can take and implement decisions related to their business activities and their critical or important functions;
• b. they maintain the orderliness of the conduct of their business and the banking, investment and payment services they provide;
• c. the risks related to current and planned third-party arrangements are adequately identified, assessed, managed, and mitigated;
• d. appropriate confidentiality arrangements regarding data and other information are in place;
• e. an appropriate flow of relevant information with the TPSPs is maintained.
• f. with regard to the third-party arrangements supporting critical or important functions, they are able to undertake at least one of the following actions, within an appropriate time frame:
• i. transfer the function to alternative TPSPs;
• ii. reintegrate the function; or
• iii. discontinue the business activities that are depending on the function.
• g. where personal data are processed by service providers located in the EU and/or third countries, appropriate measures are implemented and data are processed in accordance with Regulation (EU) 2016/679.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související standardy

2. Identifikované požadavky

3. Související standardy

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/