1.Information concerning the operator’s supply as provided for in Article 6(1)(a) of Regulation (EU) No 995/2010 and application of risk mitigation procedures shall be documented through adequate records, which shall be stored for five years and made available for checks by the competent authority.
2.In applying their due diligence system operators shall be able to demonstrate how the information gathered was checked against the risk criteria provided for in Article 6(1)(b) of Regulation (EU) No 995/2010, how a decision on risk mitigation measures was taken and how the operator determined the degree of risk.