{
  "url": "https://openlegislation.uk/eu-regulation-2017-589/article-23",
  "json_url": "https://openlegislation.uk/eu-regulation-2017-589/article-23.json",
  "legislation": "eur/2017/589",
  "legislation_title": "Commission Delegated Regulation (EU) 2017/589 of 19 July 2016 supplementing Directive 2014/65/EU of the European Parliament and of the Council with regard to regulatory technical standards specifying the organisational requirements of investment firms engaged in algorithmic trading (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-regulation-2017-589",
  "path": "article/23",
  "kind": "article",
  "number": "23",
  "heading": "Periodic review of DEA clients(Article 17(5) of Directive 2014/65/EU)",
  "text": "1. A DEA provider shall review its due diligence assessment processes annually.\n2. A DEA provider shall carry out an annual risk-based reassessment of the adequacy of its clients' systems and controls, in particular taking into account changes to the scale, nature or complexity of their trading activities or strategies, changes to their staffing, ownership structure, trading or bank account, regulatory status, financial position and whether a DEA client has expressed an intention to sub-delegate the access it receives from the DEA provider.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2017/589/article/23",
    "retrieved_at": "2026-11-01T14:45:04.882781+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}