Article 10 defines a “regulated activity provider” for the purpose of the Order, on whom a number of obligations are imposed by its other provisions. A regulated activity provider is an individual or organisation responsible for the management or control of regulated activity, who makes arrangements for a person to engage in that activity. The effect of paragraph (2) (b) is that regulated activity providers will be those with the ultimate responsibility for the regulated activity: not every individual in the management chain will be responsible for making the check of a person’s status. There is no need for a contract to be in place for an individual or body to be a regulated activity provider, and the definition applies to both paid and unpaid work.