The Uncertificated Securities Regulations 2001

System security

5.—(1) A relevant system must be so constructed and operate in such a way that it satisfies the requirements of subparagraphs (2) to (6).

(2) The relevant system must minimise the possibility of unauthorised access to, or modification of, any program or data held in any computer forming part of the Operator-system.

(3) Each dematerialised instruction must be authenticated—

(a) in accordance with the specifications of the Operator, and those specifications shall provide that each dematerialised instruction—

(i) is identifiable as being from the computers of the Operator or of a particular system-participant; and

(ii) is designed to minimise fraud and forgery; or

(b) if it is sent to the Operator by, or by the Operator to, a depositary, a clearing house or an exchange, in accordance with specifications of that depositary, clearing house or exchange to which the Operator has agreed and which provide that each dematerialised instruction—

(i) is identifiable as being from the computers of the Operator or of the depositary, clearing house or exchange which sent it; and

(ii) is designed to minimise fraud and forgery.

(4) Each dematerialised instruction must, in accordance with any relevant rules of the Operator and with the specifications of the Operator or the specifications referred to in subparagraph (3)(b) (as the case may be), express by whom it has been sent and, where relevant, on whose behalf it has been sent.

(5) Each dematerialised instruction must, in accordance with any relevant rules of the Operator and with the specifications of the Operator or the specifications referred to in subparagraph (3)(b) (as the case may be), indicate—

(a) where it is sent to a system-participant or the Operator, that it is addressed to that system-participant or the Operator;

(b) where it is sent to a person who is using the facilities of a sponsoring system-participant to receive dematerialised instructions, that it is addressed to that person and the sponsoring system-participant; and

(c) where it is sent to the Operator in order for him to send an Operator-instruction to a system-participant, that it is addressed to the Operator, to the system-participant and, if the system-participant is acting as a sponsoring system-participant, to the relevant person on whose behalf the sponsoring system-participant receives dematerialised instructions.

(6) The relevant system must minimise the possibility for a system-participant to send a dematerialised instruction on behalf of a person from whom he has no authority.

(7) For the purposes of this paragraph—

“clearing house” means a body or association—

(a)

which is a recognised clearing house within section 285(1)(b) of the 2000 Act;

(b)

which is authorised under that Act to provide clearing services in the United Kingdom; or

(c)

which provides services outside the United Kingdom which are similar in nature to those provided by any such body or association, and which is regulated or supervised in the provision of those services by a regulatory body or agency of government;

“depositary” means a body or association carrying on business outside the United Kingdom with whom an Operator has made arrangements—

(a)

to enable system-members to hold (whether directly or indirectly) and transfer title to securities (other than participating securities) by means of facilities provided by that body or association; or

(b)

to enable that body or association to permit persons to whom it provides services in the course of its business to hold (whether directly or indirectly) and transfer title to participating securities by means of the Operator’s relevant system; and

“exchange” means a body or association—

(a)

which is a recognised investment exchange within section 285(1)(a) of the 2000 Act;

(b)

which is authorised under that Act to provide a facility for the matching and execution of transactions in securities in the United Kingdom; or

(c)

which provides services outside the United Kingdom which are similar in nature to those provided by any such body or association, and which is regulated or supervised in the provision of those services by a regulatory body or agency of government.