Article 31 5.

Member States shall ensure that IORPs outsourcing key functions, the management of those IORPs, or other activities covered by this Directive enter into a written agreement with the service provider. Such agreement shall be legally enforceable and shall clearly define the rights and obligations of the IORP and the service provider.