A Service Provider
must establish and maintain appropriate internal procedures to ensure it
complies with its obligations under this section 4. The Relevant Regulator may
require the Service Provider to demonstrate the adequacy of these procedures
upon reasonable notice. However, any statement made or assurance given by the
Relevant Regulator concerning the adequacy of the Service Provider’s
compliance procedures does not affect the Service Provider’s obligations
under this section 4.