DORA, Artikkel 39, DE
1. In order to carry out its duties under this Regulation, the Lead Overseer, assisted by the joint examination teams referred to in Article 40(1), may enter in, and conduct all necessary onsite inspections on, any business premises, land or property of the ICT third-party service providers, such as head offices, operation centres, secondary premises, as well as to conduct off-site inspections.
For the purposes of exercising the powers referred to in the first subparagraph, the Lead Overseer shall consult the JON.
2. The officials and other persons authorised by the Lead Overseer to conduct an on-site inspection shall have the power to:
(a)
enter any such business premises, land or property; and
(b)
seal any such business premises, books or records, for the period of, and to the extent necessary for, the inspection.
The officials and other persons authorised by the Lead Overseer shall exercise their powers upon production of a written authorisation specifying the subject matter and the purpose of the inspection, and the periodic penalty payments provided for in Article 35(6) where the representatives of the critical ICT third-party service providers concerned do not submit to the inspection.
3. In good time before the start of the inspection, the Lead Overseer shall inform the competent authorities of the financial entities using that ICT third-party service provider.
4. Inspections shall cover the full range of relevant ICT systems, networks, devices, information and data either used for, or contributing to, the provision of ICT services to financial entities.
5. Before any planned on-site inspection, the Lead Overseer shall give reasonable notice to the critical ICT third-party service providers, unless such notice is not possible due to an emergency or crisis situation, or if it would lead to a situation where the inspection or audit would no longer be effective.
6. The critical ICT third-party service provider shall submit to on-site inspections ordered by decision of the Lead Overseer. The decision shall specify the subject matter and purpose of the inspection, fix the date on which the inspection shall begin and shall indicate the periodic penalty payments provided for in Article 35(6), the legal remedies available under Regulations (EU) No 1093/2010, (EU) No 1094/2010 and (EU) No 1095/2010, as well as the right to have the decision reviewed by the Court of Justice.
7. Where the officials and other persons authorised by the Lead Overseer find that a critical ICT third-party service provider opposes an inspection ordered pursuant to this Article, the Lead Overseer shall inform the critical ICT third-party service provider of the consequences of such opposition, including the possibility for competent authorities of the relevant financial entities to require financial entities to terminate the contractual arrangements concluded with that critical ICT third-party service provider.
Versjon: 6fba3f1b91c1d897
SHA-256: sha256:6fba3f1b91c1d8970d964b8dbd6dd6d5dd4bf2d25f98151e7e673157ef1acbb4
- Artikkel 1
- Artikkel 2
- Artikkel 3
- Artikkel 4
- Artikkel 5
- Artikkel 6
- Artikkel 7
- Artikkel 8
- Artikkel 9
- Artikkel 10
- Artikkel 11
- Artikkel 12
- Artikkel 13
- Artikkel 14
- Artikkel 15
- Artikkel 16
- Artikkel 17
- Artikkel 18
- Artikkel 19
- Artikkel 20
- Artikkel 21
- Artikkel 22
- Artikkel 23
- Artikkel 24
- Artikkel 25
- Artikkel 26
- Artikkel 27
- Artikkel 28
- Artikkel 29
- Artikkel 30
- Artikkel 31
- Artikkel 32
- Artikkel 33
- Artikkel 34
- Artikkel 35
- Artikkel 36
- Artikkel 37
- Artikkel 38
- Artikkel 40
- Artikkel 41
- Artikkel 42
- Artikkel 43
- Artikkel 44
- Artikkel 45
- Artikkel 46
- Artikkel 47
- Artikkel 48
- Artikkel 49
- Artikkel 50
- Artikkel 51
- Artikkel 52
- Artikkel 53
- Artikkel 54
- Artikkel 55
- Artikkel 56
- Artikkel 57
- Artikkel 58
- Artikkel 59
- Artikkel 60
- Artikkel 61
- Artikkel 62
- Artikkel 63
- Artikkel 64
Source: NovaCopilot