The criteria for assessing whether the compliance function of an external reviewer has the authority to discharge its responsibilities properly and independently, as referred to in Article 29(2), point (a), of Regulation (EU) 2023/2631, shall be the following:
the management body of the external reviewer has adopted policies that enable the compliance function to:
assess adherence to laws, regulations and internal policies and procedures;
carry out compliance activities objectively and effectively without undue influence;
at least one member of the compliance function:
is of a level of seniority that enables it to have direct access to decision-makers and challenge business decisions;
participates in the structures of the external reviewer tasked with overseeing risk management and regulatory compliance to ensure that compliance considerations are incorporated into the strategy and decision-making procedures of the external reviewer.