(1) If a payment institution relies on a third party for the performance of an operational function, the payment institution shall take reasonable steps to ensure that the third party complies with the requirements of these Regulations so far as those requirements are capable of application to the third party.
(2) A payment institution remains fully liable for any acts of its employees, or any agent, branch or entity to which activities are outsourced.