Skip to the text
In this act Article 3 of 7
Text as of 22 Dec 2024 · Consolidated version of 2 December 2024 · Same wording as today’s text.Today’s text

Article 3 — General requirements for the templates of the register of information

Financial servicesLevel 2ITSDORAIn forceOfficial source

3(1)

1.Financial entities shall use the templates set out in Annex I to IV to maintain and update the register of information in accordance with Article 28(3) of Regulation (EU) 2022/2554, at entity level, or at sub-consolidated and consolidated level.

Copy link
3(2)

2.Financial entities shall ensure that the templates referred to in paragraph 1 include all of the following:

Copy link
3(2)(a)
a)the relevant information in relation to all the ICT services provided by direct ICT third-party providers;
Copy link
3(2)(b)
b)information on all subcontractors that effectively underpin ICT services supporting critical or important functions or material parts thereof.\
Copy link
3(3)

3.Financial entities shall ensure that the information contained in the templates referred to in paragraph 1 is accurate and consistent. Financial entities shall review the information contained in the templates regularly and shall promptly correct any errors or discrepancies detected.

In case of groups, financial entities responsible for maintaining and updating the register of information at sub-consolidated and consolidated level shall ensure that information in relation to entity level in the consolidation is correct and consistent with the information at the sub-consolidated and consolidated level.

Copy link
3(4)

4.Financial entities shall ensure that the information contained in the templates referred to in paragraph 1 adhere to the following principles of data quality:

Copy link
3(4)(a)
a)accuracy;
Copy link
3(4)(b)
b)completeness;
Copy link
3(4)(c)
c)consistency;
Copy link
3(4)(d)
d)integrity;
Copy link
3(4)(e)
e)uniformity;
Copy link
3(4)(f)
f)validity.\
Copy link
3(5)

5.Financial entities shall use a valid and active legal entity identifier (LEI) or the European Unique Identifier referred to in Article 16 of Directive (EU) 2017/1132 (‘EUID’), and where available both of these identifiers, to identify all of their ICT third-party service providers that are legal persons, except for individuals acting in a business capacity.

Copy link
3(6)

6.Where an ICT service provided by a direct ICT third-party service provider is supporting a critical or important function of the financial entities, financial entities shall ensure through the direct ICT third-party service provider, that all the subcontractors of the direct ICT third-party service provider included in the register of information in accordance with paragraph 2, point (b), which effectively underpin/support ICT services supporting critical or important functions, use a valid and active LEI or provide their EUID, and where available both of these identifiers, except if those subcontractors are individuals acting in a business capacity.

Copy link