Article 16 — Organisational requirements — compare
Showing 3 of 3Release 2 Nov 2026Details
- Coverage
- MiFID II: every English consolidation from 23 Mar 2023. Older wording is not held and is not replaced by any other text. Not covered: national guidance, court decisions.
- Freshness
- Release c89ff15e published 2 Nov 2026, 05:02 CET. This article checked word for word against EUR-Lex on 26 Oct 2026.
- Shown
- Showing 3 of 3
- Failures
- None.
- Incomplete
- No.
- From
- 23 March 2023 · Consolidated version of 23 March 2023 · Checked against EUR-Lex on 26 Oct 2026 · Official source
- To
- 2 November 2026 · Consolidated version of 17 January 2025 · Checked against EUR-Lex on 26 Oct 2026 · Official source
4.An investment firm shall take reasonable steps to ensure continuity and regularity in the performance of investment services and activities. To that end, the investment firm shall employ appropriate and proportionate systems, including information and communication technology (‘ICT’) systems that are set up and managed in accordance with Article 7 of Regulation (EU) 2022/2554 of the European Parliament and of the Council, as well as appropriate and proportionate resources and procedures.
An investment firm shall have sound administrative and accounting procedures, internal control mechanisms, and effective procedures for risk assessment, and effective control and safeguard arrangements for information processing systems.
Without prejudice to the ability of competent authorities to require access to communications in accordance with this Directive and Regulation (EU) No 600/2014, an investment firm shall have sound security mechanisms in place to guarantee ensure, in accordance with the requirements laid down in Regulation (EU) 2022/2554, the security and authentication of the means of transfer of information, to minimise the risk of data corruption and unauthorised access and to prevent information leakage, thereby maintaining the confidentiality of the data at all times.