Article 40 6.

PEPP providers shall have appropriate systems and structures in place to fulfil the requirements laid down in paragraphs 1 to 5 as well as a written policy, approved by the management, supervisory or administrative body of the PEPP provider, ensuring the ongoing appropriateness of the information submitted.