Source: OJ L, 2025/532, 2.7.2025

Current language: SV

Artikel 2 Koncerntillämpning


Summary What does Article 2 of the RTS on subcontracting ICT services say?

This article addresses how the regulation applies at a group level, specifically when it operates on a consolidated or sub-consolidated basis.

It places responsibility on the parent undertaking — the entity accountable for producing consolidated financial statements — to ensure that the rules governing ICT subcontracting for critical or important functions are applied uniformly across every financial entity within the group.

It effectively acts as a consistency and governance bridge, ensuring that compliance with the broader regulation is not fragmented across group members.

Important points:

  • If you are the parent undertaking of a group, ensure that ICT subcontracting conditions are implemented consistently across all financial entities within that group.
  • This obligation is triggered where subcontracting is already permitted under existing contractual arrangements for ICT services.
  • The parent undertaking is responsible for ensuring these conditions are adequate for the effective application of the regulation at all relevant levels of the group.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

Om denna förordning är tillämplig på undergrupps- eller gruppnivå ska det moderföretag som är ansvarigt för att upprätta koncernredovisning på undergrupps- eller gruppnivå säkerställa att villkoren för utläggning av IKT-tjänster som stöder kritiska eller viktiga funktioner, eller väsentliga delar därav, på underentreprenad, om sådan utläggning på underentreprenad är tillåten enligt de kontraktsmässiga arrangemangen avseende IKT-tjänster, konsekvent uppfylls av alla finansiella entiteter som ingår i koncernen och att de är tillräckliga för en effektiv tillämpning av denna förordning på alla relevanta nivåer.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod