Skip to the text

Article 35 — Outsourcing — compare

Showing 2 of 2Release 10 Nov 2026Details
Coverage
Not covered: national guidance, court decisions.
Freshness
Release 2d86bd12 published 10 Nov 2026, 17:06 CET. Verified against EUR-Lex on 9 Nov 2026.
Shown
Showing 2 of 2
Failures
None.
Incomplete
No.
From
12 August 2022 · Consolidated version of 12 August 2022 · Verified 9 Nov 2026 · Official source
To
11 November 2026 · Consolidated version of 24 December 2024 · Verified 9 Nov 2026 · Official source
35(1)

1.Where a CCP outsources operational functions, services or activities, it shall remain fully responsible for discharging all of its obligations under this Regulation and shall ensure at all times that:

35(1)(a)
(a)outsourcing does not result in the delegation of its responsibility;
35(1)(b)
(b)the relationship and obligations of the CCP towards its clearing members or, where relevant, towards their clients are not altered;
35(1)(c)
(c)the conditions for authorisation of the CCP do not effectively change;
35(1)(d)
(d)outsourcing does not prevent the exercise of supervisory and oversight functions, including on-site access to acquire any relevant information needed to fulfil those mandates;
35(1)(e)
(e)outsourcing does not result in depriving the CCP from the necessary systems and controls to manage the risks it faces;
35(1)(f)
(f)the service provider implements equivalent business continuity requirements to those that the CCP must fulfil under this Regulation;
35(1)(g)
(g)the CCP retains the necessary expertise and resources to evaluate the quality of the services provided and the organisational and capital adequacy of the service provider, and to supervise the outsourced functions effectively and manage the risks associated with the outsourcing and supervises those functions and manages those risks on an ongoing basis;
35(1)(h)
(h)the CCP has direct access to the relevant information of the outsourced functions;
35(1)(i)
(i)the service provider cooperates with the competent authority in connection with the outsourced activities;
35(1)(j)
(j)the service provider protects any confidential information relating to the CCP and its clearing members and clients or, where that service provider is established in a third country, ensures that the data protection standards of that third country, or those set out in the agreement between the parties concerned, are comparable to the data protection standards in effect in the Union.

A CCP shall not outsource major activities linked to risk management unless such outsourcing is approved by the competent authority. The decision of the competent authority shall be subject to an opinion of the college pursuantreferred to in Article 18 pursuant to Article  19 and an opinion of ESMA pursuant to Article 24a(7), first subparagraph, point (bc), issued in accordance with the procedure set out in Article 17b.

35(2)

2.The competent authority shall require the CCP to allocate and set out its rights and obligations, and those of the service provider, clearly in a written agreement.

35(3)

3.A CCP shall make all information necessary available on request, to enable the competent authority, ESMA and the college referred to in Article 18 to assess the compliance of the performance of the outsourced activities with this Regulation available on request.