Where the operator or aircraft operator outsources one or more data flow activities referred to in Article 58 or control activities referred to in Article 59, the operator or aircraft operator shall proceed to all of the following:

(a) check the quality of the outsourced data flow activities and control activities in accordance with this Regulation;

(b) define appropriate requirements for the outputs of the outsourced processes and the methods used in those processes;

(c) check the quality of the outputs and methods referred to in point (b) of this Article;

(d) ensure that outsourced activities are carried out such that those are responsive to the inherent risks and control risks identified in the risk assessment referred to in Article 59.