Article 27f 3.

The management body of a data reporting services provider shall define and oversee the implementation of the governance arrangements that ensure effective and prudent management of an organisation, including the segregation of duties in the organisation and the prevention of conflicts of interest, and in a manner that promotes the integrity of the market and the interest of its clients.