1. Member States shall ensure that, where payment
institutions rely on third parties for the performance of operational
functions, those payment institutions take reasonable steps to ensure
that the requirements of this Directive are complied with.
2. Member States shall require that payment
institutions remain fully liable for any acts of their employees, or any
agent, branch or entity to which activities are outsourced.