(1) A relevant parent undertaking must -
(a) ensure that the policies, controls and procedures referred to in regulations 19(1) and 19A(1) apply -
(i) to all its subsidiary undertakings, including subsidiary undertakings located outside the United Kingdom; and
(ii) to any branches it has established outside the United Kingdom;
which is carrying out any activity in respect of which the relevant person is subject to these Regulations;
(b) establish and maintain throughout its group the policies, controls and procedures for data protection and sharing information for the purposes of preventing money laundering, terrorist financing and proliferation financing with other members of the group, including policies on the sharing of information about customers, customer accounts and transactions;
(c) regularly review and update the policies, controls and procedures applied and established under sub-paragraphs (a) and (b);
(d) maintain a record in writing of -
(i) the policies, controls and proc
…