(1) An Authorised Person must inform the Regulator about any material outsourcing arrangements.
(2) An Authorised Person which has a material outsourcing arrangement must:
(a) establish and maintain comprehensive outsourcing policies, contingency plans and outsourcing risk management programmes;
(b) enter into an appropriate and written outsourcing contract; and
(c) ensure that the outsourcing arrangements neither reduce its ability to fulfil its obligations to Customers and the Regulator, nor hinder supervision of the Authorised Person by the Regulator.
(3) An Authorised Person must ensure that the terms of its outsourcing contract with each service provider under a material outsourcing arrangement require the service provider to:
(a) provide for the provision of information under Rule 8.1 in relation to the Authorised Person and access to their business premises; and
(b) deal in an open and co-operative way with the Regulator.