{
  "url": "https://openlegislation.uk/eu-regulation-2019-359/article-7",
  "json_url": "https://openlegislation.uk/eu-regulation-2019-359/article-7.json",
  "legislation": "eur/2019/359",
  "legislation_title": "Commission Delegated Regulation (EU) 2019/359 of 13 December 2018 supplementing Regulation (EU) 2015/2365 of the European Parliament and of the Council with regard to regulatory technical standards specifying the details of the application for registration and extension of registration as a trade repository (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-regulation-2019-359",
  "path": "article/7",
  "kind": "article",
  "number": "7",
  "heading": "Internal control",
  "text": "1. An application for registration as a trade repository shall contain detailed information relating to the internal control system of the applicant, including information regarding its compliance function, risk assessment, internal control mechanisms and arrangements of its internal audit function.\n2. The detailed information referred to in paragraph 1 shall contain:\n(a) the applicant's internal control policies and respective procedures related to their consistent and effective implementation;\n(b) any policies, procedures and manuals regarding the monitoring and evaluation of the adequacy and effectiveness of the applicant's systems;\n(c) any policies, procedures and manuals regarding the control and safeguard for the applicant's information processing systems;\n(d) the identity of the internal bodies in charge of the evaluation of the relevant internal control findings.\n3. An application for registration as a trade repository shall contain the following information with respect to the applicant's internal audit activities:\n(a) the composition of any Internal Audit Committee, its competences and responsibilities;\n(b) its internal audit function charter, methodologies, standards and procedures;\n(c) an explanation how its internal audit charter, methodology and procedures are developed and applied taking into account the nature and extent of the applicant's activities, complexities and risks;\n(d) a work plan for three years following the date of application addressing the nature and extent of the applicant's activities, complexities and risks.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2019/359/article/7",
    "retrieved_at": "2026-11-01T14:43:32.454609+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}