Competent authorities shall confirm that an institution identifies, collects and treats data on operational risk events and losses related to legal risk for the purposes of both management of operational risk and calculation of the AMA own funds requirement by verifying at least all of the following:
that the institution clearly identifies and classifies as operational risk losses or other expenses deriving from events that result in legal proceedings, including at least the following;
a failure to act where such action is necessary to comply with a legal rule;
action taken to avoid compliance with a legal rule;
that the institution clearly identifies and classifies as operational risk losses or other expenses resulting from voluntary actions intended to avoid or mitigate legal risks arising from operational risk events, including refunds or discounts of future services offered to customers voluntarily where such refunds are not offered as a result of customer complaints;
that the institution clearly identifies and classifies as operational risk losses resulting from errors and omissions in contracts and documentation;
that the institution does not classify the following as operational risk:
refunds to third parties or employees and goodwill payments due to business opportunities, where no breach of any rules or ethical conduct has occurred and where the institution has fulfilled its obligations on a timely basis;
external legal costs where the underlying event is not an operational risk event.
For the purposes of paragraph (a), legal proceedings shall be considered to be all legal settlements, including both mandated court settlements and out of court settlements.
For the purposes of this Article, legal rules shall include at least the following:
any requirement derived from national or international statutory or legislative provisions;
any requirement derived from contractual arrangements, internal rules and codes of conduct established in accordance with national or international norms and practices.