(1) Where a payment institution relies on a third party for the performance of operational functions, the payment institution shall take reasonable steps to ensure that the third party complies with the requirements of these Regulations in so far as those requirements apply to the third party.
(2) A payment institution remains fully liable for any acts of its employees, and any agent, branch or entity to which activities are outsourced.