CHAPTER I

GENERAL ORGANISATIONAL REQUIREMENTS FOR TRADING VENUES ENABLING OR ALLOWING ALGORITHMIC TRADING THROUGH THEIR SYSTEMS

Subject matter and scope(Article 48 of Directive 2014/65/EU)
Article 1
1
This Regulation lays down detailed rules for the organisational requirements of the systems of the trading venues allowing or enabling algorithmic trading, in relation to their resilience and capacity, requirements on trading venues to ensure appropriate testing of algorithms and requirements in relation to the controls concerning DEA pursuant to Article 48(12)(a),(b) and (g) of Directive 2014/65/EU.
2
For the purposes of this Regulation, it is considered that a trading venue allows or enables algorithmic trading where order submission and order matching is facilitated by electronic means.
3
For the purposes of this Regulation, any arrangements or systems that allow or enable algorithmic trading shall be considered ‘algorithmic trading systems’.

Self-assessments of compliance with Article 48 of Directive 2014/65/EU(Article 48 of Directive 2014/65/EU)
Article 2
1
Before the deployment of a trading system and at least once a year, trading venues shall carry out a self-assessment of their compliance with Article 48 of Directive 2014/65/EU, taking into account the nature, scale and complexity of their business. The self-assessment shall include an analysis of all parameters set out in the Annex to this Regulation.
2
Trading venues shall keep a record of their self-assessment for at least five years.

Governance of trading venues(Article 48(1) of Directive 2014/65/EU)
Article 3
1
As part of their overall governance and decision making framework, trading venues shall establish and monitor their trading systems through a clear and formalised governance arrangement setting out:
a
their analysis of technical, risk and compliance issues when taking critical decisions.
b
clear lines of accountability, including procedures to approve the development, deployment and subsequent updates of trading systems and to resolve problems identified when monitoring the trading systems;
c
effective procedures for the communication of information such that instructions can be sought and implemented in an efficient and timely manner;
d
separation of tasks and responsibilities, to ensure effective supervision of compliance by the trading venues.
2
The management body or the senior management of trading venues shall approve:
a
the self-assessment of compliance in accordance with Article 2;
b
measures to expand the capacity of the trading venue where necessary in order to comply with Article 11;
c
actions to remedy any material shortcomings detected in the course of their monitoring in accordance with Articles 12 and 13 and after the periodic review of the performance and capacity of the trading systems in accordance with Article 14.

Compliance function within the governance arrangements(Article 48(1) of Directive 2014/65/EU)
Article 4
1
Trading venues shall ensure that their compliance function is responsible for:
a
providing clarity to all staff involved in algorithmic trading about the trading venues' legal obligations with respect to such trading;
b
developing and maintaining the policies and procedures to ensure that the algorithmic trading systems comply with those obligations.
2
Trading venues shall ensure that their compliance staff has at least a general understanding of the way in which algorithmic trading systems and algorithms operate.
The compliance staff shall be in continuous contact with persons within the trading venue who have detailed technical knowledge of the venue's algorithmic trading systems or algorithms.
Trading venues shall also ensure that compliance staff have, at all times, direct contact with persons who have access to the functionality referred to in Article 18(2)(c) (‘kill functionality’) or access to that kill functionality and to those who are responsible for the algorithmic trading system.
3
Where the compliance function, or elements thereof, is outsourced to a third party, trading venues shall provide the third party with the same access to information as they would to their own compliance staff. Trading venues shall enter into an agreement with such compliance consultants, ensuring that:
a
data privacy is guaranteed;
b
auditing of the compliance function by internal and external auditors or by the competent authority is not hindered.

Staffing(Article 48(1) of Directive 2014/65/EU)
Article 5
1
Trading venues shall employ a sufficient number of staff with the necessary skills to manage their algorithmic trading systems and trading algorithms and with sufficient knowledge of:
a
the relevant trading systems and algorithms;
b
the monitoring and testing of such systems and algorithms;
c
the types of trading undertaken by the members, participants or clients of the trading venue (‘members’);
d
the trading venue's legal obligations.
2
Trading venues shall define the necessary skills referred to in paragraph 1. The staff referred to in paragraph 1 shall have those necessary skills at the time of recruitment or shall acquire them through training after recruitment. The trading venues shall ensure that those staff's skills remain up-to-date and shall evaluate their skills on a regular basis.
3
The staff training referred to in paragraph 2 shall be tailored to the experience and responsibilities of the staff, taking into account the nature, scale and complexity of their activities.
4
The staff referred to in in paragraph 1 shall include staff with sufficient seniority to perform their functions effectively within the trading venue.

Outsourcing and procurement(Article 48(1) of Directive 2014/65/EU)
Article 6
1
Trading venues outsourcing all or part of their operational functions in relation to the systems allowing or enabling algorithmic trading shall ensure that:
a
the outsourcing agreement exclusively relates to operational functions and does not alter the responsibilities of the senior management and the management body;
b
the relationship and obligations of the trading venue towards its members, competent authorities, or any third parties, such as clients of data feed services are not altered;
c
they meet the requirements that they must comply with in order to be authorised in accordance with Title III of Directive 2014/65/EU.
2
For the purposes of this article, operational functions shall include all direct activities related to the performance and surveillance of the trading systems supporting the following elements:
a
upstream connectivity, order submission capacity, throttling capacities and ability to balance customer order entrance through different gateways;
b
trading engine to match orders;
c
downstream connectivity, order and transaction edit and any other type of market data feed;
d
infrastructure to monitor the performance of the elements referred to in points (a), (b) and (c).
3
Trading venues shall document the process of selecting the service provider to whom the operational functions are to be outsourced (‘the service provider’). They shall take the necessary steps to ensure, before concluding the outsourcing agreement and throughout its duration, that the following conditions are satisfied:
a
the service provider has the ability to perform the outsourced functions reliably and professionally and is the holder of any authorisations required by law for those purposes;
b
the service provider properly supervises the carrying out of the outsourced functions and adequately manages risks associated with the outsourcing agreement;
c
the outsourced services are provided in accordance with the specifications of the outsourcing agreement, which are based on pre-determined methods for assessing the standard of performance of the service provider, including metrics to measure the service provided and specifications of the requirements that shall be met;
d
the trading venue has the necessary expertise to supervise the outsourced functions effectively and manage risks associated with the outsourcing agreement;
e
the trading venue has the ability to take swift action if the service provider does not carry out the functions effectively and in compliance with applicable laws and regulatory requirements;
f
the service provider discloses to the trading venue any fact that may have a material impact on its ability to carry out the outsourced functions effectively and in compliance with its legal obligations;
g
the trading venue is able to terminate the outsourcing agreement where necessary without detriment to the continuity and quality of its services to clients;
h
the service provider cooperates with the competent authorities of the trading venue in connection with the outsourced activities;
i
the trading venue has effective access to data related to the outsourced activities and to the business premises of the service provider, and auditors of the trading venue and competent authorities have effective access to data related to the outsourced activities;
j
the trading venue sets out requirements to be met by the service providers to protect confidential information relating to the trading venue and its members, and to the venue's proprietary information and software;
k
the service provider meets the requirements referred to in point (j);
l
the trading venue and the service provider establish, implement and maintain a contingency plan for disaster recovery and periodic testing of backup facilities, where that is necessary having regard to the operational function that has been outsourced;
m
the outsourcing agreement specifies the obligations of the service provider in case it cannot provide its services, including the provision of the service by a substituting firm;
n
the trading venue has access to information in relation to the business continuity arrangements referred to in Article 16 of the service provider.
4
Outsourcing agreements shall be concluded in writing and shall set out:
a
the assignment of rights and obligations between service provider and trading venue;
b
a clear description of:
1. the operational functions that are outsourced;
2. the access of the trading venue to the books and records of the service provider;
3. the procedure to identify and address potential conflicts of interest;
4. the responsibility assumed by each party;
5. the procedure for the amendment and termination of the agreement.
c
the means to ensure that both the trading venue and the service provider facilitate in any way necessary the exercise by the competent authority of its supervisory powers.
5
Trading venues shall report to the competent authorities their intention to outsource operational functions in the following cases:
a
where the service provider provides the same service to other trading venues;
b
where critical operational functions necessary for business continuation would be outsourced, in which case the trading venues shall request a prior authorisation from the competent authority.
6
For the purposes of point (b) in paragraph 5, critical operational functions shall include those functions necessary to comply with the obligations referred to in Article 47(1)(b), (c) and (e) of Directive 2014/65/EU.
7
Trading venues shall inform the competent authorities of any outsourcing agreements not subject to prior authorisation requirement immediately after the signature of the agreement.