Source: OJ L, 2025/532, 2.7.2025

Current language: EN

Article 6 Termination of the contract between the financial entity and the ICT third-party service provider


Summary What does Article 6 of the RTS on subcontracting ICT services say?

This article directly builds on Articles 4 and 5, which set out the contractual requirements and change notification process for subcontracting arrangements.

Article 6 provides the enforcement mechanism for those requirements: the right for financial entities to terminate their contractual arrangement with an ICT third-party service provider where that provider has acted outside the agreed boundaries.

Essentially, it gives financial entities the contractual exit rights they need when a provider ignores objections, bypasses the notice period, or subcontracts services without authorisation.

Important points:

  • Include termination rights in your contractual arrangements with ICT third-party service providers to cover the scenarios set out in this article.
  • The three grounds for termination all relate to provider misconduct: ignoring objections to material changes, implementing changes before the notice period expires, or subcontracting services not explicitly permitted under the contract.
  • All three termination triggers concern subcontracting that supports critical or important functions, meaning this protection is specifically focused on the highest-risk arrangements.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

The financial entity shall have the right to provide in the contractual arrangement with the ICT third-party service provider that the contractual arrangement is to terminate in each of the following cases:

  1. the financial entity has objected to material changes to the subcontracting arrangements supporting critical or important functions and requested for modifications to those arrangements, but the ICT third-party service provider has nevertheless implemented those material changes;

  2. the ICT third-party service provider has implemented material changes to subcontracting arrangements supporting critical or important functions or material parts thereof before the end of the notice period without approval by the financial entity;

  3. the ICT third-party service provider subcontracts an ICT service that supports a critical or important function or material part thereof not explicitly permitted to be subcontracted by the contract between the financial entity and the ICT third-party service provider.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod