1. An applicant seeking authorisation to provide data reporting services shall include in its application for authorisation information on the internal corporate governance policies and the procedures which govern its management body, senior management, and, where established, committees.

2. The information set out in paragraph 1 shall include:

(a) a description of the processes for selection, appointment, performance evaluation and removal of senior management and members of the management body;

(b) a description of the reporting lines and the frequency of reporting to the senior management and the management body;

(c) a description of the policies and procedures on access to documents by members of the management body.