46. When using a TPSP, financial entities should at least ensure that: a. they can take and …

When using a TPSP, financial entities should at least ensure that:

a. they can take and implement decisions related to their business activities and their critical or important functions;
b. they maintain the orderliness of the conduct of their business and the banking, investment and payment services they provide;
c. the risks related to current and planned third-party arrangements are adequately identified, assessed, managed, and mitigated;
d. appropriate confidentiality arrangements regarding data and other information are in place;
e. an appropriate flow of relevant information with the TPSPs is maintained.
f. with regard to the third-party arrangements supporting critical or important functions, they are able to undertake at least one of the following actions, within an appropriate time frame:
i. transfer the function to alternative TPSPs;
ii. reintegrate the function; or
iii. discontinue the business activities that are depending on the function.
g. where personal data are processed by service providers located in the EU and/or third countries, appropriate measures are implemented and data are processed in accordance with Regulation (EU) 2016/679.

1. Übersicht

Bezeichnung	Regulierung

Anforderungen
Quelle	Anforderung

Standards
Quelle	Anforderung