fundregtracker.
Last verified 2026-10-07

UCITS in practice: depositary, PRIIPs KID and Irish rules

Every UCITS has a single depositary that oversees dealing and NAV, monitors cash and safekeeps assets. It must replace a lost custody asset, unless it proves an external event beyond its reasonable control. The consequences must have been unavoidable despite all reasonable efforts (UCITS Directive Arts 22 and 24). Since 1 January 2023, a PRIIPs key information document (KID) must be drawn up and published before a UCITS is made available to retail investors. No separate KIID is then required. That holds where the investment company, or a common fund's management company, draws up, provides, revises and translates the KID (PRIIPs Art 32; UCITS Art 82a).

Depositary
One per UCITS, in the home Member State, from the categories that Member State allows.UCITS Art 22(1) · Art 23
Core duties
Oversight of dealing, valuation, instructions, settlement and income; cash-flow monitoring; custody and ownership checks.UCITS Art 22(3) to (5)
Liability
Returns a lost custody asset without undue delay, unless it proves an unavoidable external event beyond its control.UCITS Art 24
Retail document
PRIIPs KID, published before retail availability; the UCITS exemption ended on 31 December 2022.PRIIPs Art 5 · Art 32
KID review
At least every 12 months and on any significant change; revise without undue delay if needed.RTS 2017/653 Art 15 · Art 16
Irish rulebook
S.I. 316/2026, signed on 7 July 2026 (Sch 11); commencement is under To verify.S.I. 316/2026 reg 2 · reg 131

Which UCITS need a depositary, and who can act?

An investment company, and a management company for each common fund it manages, appoints a single depositary (UCITS Art 22(1)). The depositary has its registered office or an establishment in the UCITS home Member State (Art 23(1)). No company may act as both management or investment company and depositary (Art 25(1)).

Eligible entityConditionSource
National central bankWhere the Member State allows.Art 23(2)(a), (3)
Credit institutionAuthorised under Directive 2013/36/EU, where the Member State allows.Art 23(2)(b)
Other legal entityAuthorised for depositary activities, supervised, and meeting the Art 23(2) capital and organisational requirements, where the Member State allows.Art 23(2)(c)
Detail, edge cases and sources

Each Member State decides which eligible categories it allows (Art 23(3)). Eligible categories are a central bank, an EU credit institution, or another entity meeting the Article 23(2)(c) conditions. An "other legal entity" is authorised for depositary activities, with capital and own-funds minimums. It is under prudential regulation and ongoing supervision, and meets the Art 23(2) organisational requirements.

A written contract governs the appointment. It is made with the investment company, or the management company for each common fund, and covers at least sixteen items. Among them are services by asset type, safekeeping by country, termination and hand-over, and information flows. Escalation and the depositary's right to enquire and visit on site are also covered (Delegated Regulation 2016/438, Art 2(1) and (2)). One contract may cover several common funds, unless national law requires otherwise. It names the law that governs it (Art 2(4) and (5)). The Delegated Regulation applies from 13 October 2016 (Art 25).

A depositary may carry out other tasks that could conflict with its role only if it separates them functionally and hierarchically. The conflicts must also be identified, managed, monitored and disclosed to investors (UCITS Art 25(2)).

What does a UCITS depositary do?

The depositary has three sets of duties (UCITS Art 22(3) to (5)): oversight, cash monitoring and custody. It holds financial instruments in custody and verifies ownership of other assets. It may delegate safekeeping, under conditions, but never oversight or cash monitoring (Art 22a(1)).

Detail, edge cases and sources

The depositary oversees how the management company deals in units, values them, applies income and settles trades. It monitors the UCITS cash flows. Under oversight, dealing and unit valuation follow national law and the fund documents. Instructions are carried out unless they conflict with them. Consideration is remitted within the usual time limits, and income is applied correctly. Under cash monitoring, subscription payments are received and cash is booked properly. Instruments that can be registered in the depositary's books sit in segregated accounts. Ownership of other assets is verified from documents and, where available, external evidence, and a record is kept up to date.

Instruments that can be physically delivered to the depositary are always in its custody scope. Instruments registered directly in the UCITS name with the issuer or its agent only, such as a transfer agent, are not held in custody (Reg. 2016/438 Art 12(2) and (3)). The depositary carries out the manager's instructions unless they conflict with national law or the fund rules (UCITS Art 22(3)(c)).

Reuse of custody assets needs all four conditions. It is for the account of the UCITS, on the manager's instructions, and for the benefit of the UCITS and its investors. It is also covered by high-quality, liquid collateral received under a title transfer arrangement. The collateral's market value must at all times be at least the market value of the reused assets plus a premium (UCITS Art 22(7)).

Safekeeping may be delegated only if the depositary does not aim to avoid the Directive and can show an objective reason. It applies due skill, care and diligence in choosing and appointing the delegate, except an investor CSD, and in reviewing and monitoring it. A custody delegate is under effective prudential regulation, capital rules and supervision, has an external periodic audit, and segregates client assets (UCITS Art 22a(2) and (3)). A narrow exception applies in a third country whose law requires a local entity, while no compliant local entity exists. Investors must be informed before investing, and the UCITS must instruct the delegation (Art 22a(3)).

If the depositary or an EU custody delegate becomes insolvent, the UCITS assets held in custody are not available to its creditors (UCITS Art 22(8)). For a third-country delegate, the depositary ensures that the delegate receives independent legal advice that the local insolvency law recognises the segregation (Reg. 2016/438 Art 17(2)(a)).

When is the depositary liable for a lost asset?

Where a financial instrument held in custody is lost, the depositary returns an identical instrument or the corresponding amount without undue delay (UCITS Art 24(1)). It escapes liability only by proving an external event beyond its reasonable control, with consequences unavoidable despite all reasonable efforts. Delegation and contract cannot reduce it; an excluding agreement is void (Art 24(2) to (4)).

Loss of a custody asset (UCITS Art 24 · Reg. 2016/438 Arts 18 and 19)
1Substituted by, or converted into, another instrument?
Yes
→
Not deemed lost (Art 18(3))
2Ownership invalid, or the UCITS definitively deprived of it or unable to dispose of it?
No
→
Not a loss under Art 18(1)
3Caused by the depositary's or its delegate's act or omission?
Yes
→
Liable: return an identical instrument or the amount
4Reasonably preventable with a diligent depositary's precautions under common industry practice?
Yes
→
Liable
5Preventable with documented, rigorous and comprehensive due diligence?
Yes
→
Liable
Only then is the external-event defence met.
Detail, edge cases and sources

A loss is deemed in three cases. A stated right of ownership is shown not to be valid. The UCITS is definitively deprived of its ownership. Or it is definitively unable to dispose of the instrument. An instrument substituted by, or converted into, another is not deemed lost (Reg. 2016/438 Art 18(3)). The management or investment company ascertains a loss by a documented process; investors are then notified immediately in a durable medium (Art 18(2)).

Delegation does not affect this liability, and no agreement may exclude or limit it; such an agreement is void (Art 24(2) to (4)). Step 4 asks whether the depositary could reasonably have prevented the event with the precautions of a diligent depositary under common industry practice. Step 5 asks whether it could have prevented the loss with documented, rigorous and comprehensive due diligence.

The external-event defence needs all three conditions in Article 19(1) (Reg. 2016/438 Art 19(1)). Natural events beyond human control, government or court acts affecting the instruments, and war, riots or other major upheavals may meet points (a) and (b). The depositary must still prove the due-diligence condition in point (c) (Art 19(2)). An accounting error, operational failure, fraud or a failure to segregate does not (Art 19(3)).

The defence needs a proven external event beyond the depositary's control, with consequences unavoidable despite all reasonable efforts. Delegation and contract cannot reduce this liability.

For other losses, the depositary is liable where they result from its negligent or intentional failure to fulfil its obligations under the Directive (UCITS Art 24(1)).

How independent must the depositary be from the manager?

No company may be both management company and depositary (UCITS Art 25(1)). Article 21 bars three overlaps of board seats and employment (Reg. 2016/438 Art 21). Where the two have a "link" or share a group, the management or investment company documents why it chose that depositary (Art 22).

RelationshipWhat the Delegated Regulation requiresSource
Any.No shared management-body members, and no cross-employment of board members.Art 21
Link or group link.A documented comparison with unlinked depositaries, and a report.Art 22(2)
Group link.At least one third of the members, or two persons if lower, are independent.Art 24(1)
Detail, edge cases and sources

Article 21 applies to any relationship. No one sits on both management bodies; no manager board member employed by the depositary; no depositary board member employed by the manager or investment company. A link or group link needs a documented comparison with depositaries that have no link, and a report on it (Art 22(2)). The two may have a 10% holding or significant-influence "link", or belong to one group.

For a group link, the independence rule applies to each management body where it also has the supervisory functions, otherwise to each supervisory body (Art 24(1)). A separate supervisory body may also arise. There, no more than one third of its members may also sit on, or work for, the other side (Reg. 2016/438 Art 21). A "link" is a direct or indirect holding of 10% or more of capital or votes. A holding giving significant influence over management also counts. A "group link" means membership of the same group under Article 2(11) of Directive 2013/34/EU (Reg. 2016/438 Art 1). An independent member is not a member of the management or supervisory body, or an employee, of another group undertaking. It also has no business, family or other relationship that creates a conflict impairing its judgment (Art 24(2)).

What must the management company have in place?

Directive 2010/43/EU sets the management company's organisation (Directive 2010/43 Art 12). It keeps a permanent risk management function, independent of its operating units, unless a proportionate derogation applies. It keeps a written conflicts-of-interest policy (Art 18).

Detail, edge cases and sources

Records of orders and transactions are kept for at least five years (Arts 14 to 16). Investors may complain, and get information on the procedure, free of charge (Art 6). The risk management function is hierarchically and functionally independent, and a Member State may allow the proportionate derogation. The documented risk policy covers market, liquidity, sustainability, counterparty and operational risks. The firm takes all reasonable steps to centralise and record received subscription and redemption orders immediately.

The conflict criteria include a likely gain, or an avoided loss, at the expense of the UCITS. Another case is an inducement beyond the standard commission or fee (Directive 2010/43 Art 17(1)). A competent authority may require records to be kept longer than five years in exceptional circumstances (Art 16(1)). Remuneration rules are outside this guide.

Does a UCITS need a PRIIPs KID, and when?

Yes, before it is made available to retail investors. The UCITS exemption ended on 31 December 2022 (PRIIPs Art 32(1)). The investment company, or the management company for a common fund, may draw up, provide, revise and translate a compliant KID. That KID then satisfies the UCITS key investor information rules, and no KIID may be required (UCITS Art 82a).

WhoDutySource
ManufacturerDraws up the KID and publishes it on its website before retail availability.PRIIPs Art 5(1)
Adviser or sellerIn good time before the retail investor is bound; after the deal only on all four Art 13(3) conditions.Art 13(1) to (3)
Manufacturer, adviser and sellerComplaint arrangements, with a substantive reply to a KID complaint.Art 19
Detail, edge cases and sources

UCITS managers and sellers were exempt from PRIIPs until 31 December 2022 (PRIIPs Art 32(1)). The manufacturer publishes the KID before the product is made available to retail investors (PRIIPs Art 5(1)). The adviser or seller may also provide it to a person with written authority to decide for the investor (Art 13). A complaint about the KID gets a substantive reply in a timely and proper manner, and cross-border redress is available (Art 19).

A "retail investor" is a MiFID II retail client. An insurance customer who would not be a professional client also counts (PRIIPs Art 4(6)). The KID duties attach to making a product available, and providing it, to retail investors (Arts 5 and 13). The post-sale route needs all four conditions. The investor starts a distance sale, and prior provision is not possible. The investor is told it may delay the deal to read the KID, and consents (Art 13(3)).

"Good time" means early enough for the investor to consider the document, whether or not a cooling-off period applies. The adviser or seller weighs the investor's knowledge and experience and the product's complexity. Where the investor initiated the deal, it also weighs any urgency the investor expressly states (RTS 2017/653 Art 17). The manufacturer is not civilly liable on the KID alone unless it is misleading, inaccurate or inconsistent with the binding documents or Article 8. A retail investor who shows loss from relying on it may then claim damages under national law, and no contract term may limit that liability (PRIIPs Art 11).

What goes in a UCITS KID?

The KID is pre-contractual information: a stand-alone document of at most three A4 sides, separate from marketing material (PRIIPs Art 6). The RTS sets the 1-to-7 risk indicator and four performance scenarios (RTS 2017/653 Art 3), and the cost tables (Art 5).

Detail, edge cases and sources

The KID follows a fixed order of sections with set headings (PRIIPs Art 8(3)). If marketing documents in the distribution state use official languages, the KID uses at least those (PRIIPs Art 7(2)). The risk indicator combines market and credit risk. Total costs are shown over set periods, with one-off, recurring and incidental costs.

The market risk class has seven bands of VaR-equivalent volatility, from below 0.5% to 80% or more (RTS 2017/653 Annex II, point 2). The overall indicator combines that class with the credit risk class (Annex II, point 52). A manufacturer may increase the indicator where it does not reflect the risks; that decision is documented (point 52a).

Recurring costs separate portfolio transaction costs from other recurring costs. Incidental costs include performance fees and carried interest (RTS Art 5(3)). The PRIIPs Regulation's full text is summarised on the PRIIPs law page.

How often must the KID be reviewed?

The manufacturer reviews the KID at least every 12 months from first publication. It also reviews it on any change that significantly affects, or is likely to significantly affect, its information (RTS 2017/653 Art 15(1)). Where a review shows a change is needed, it revises the KID without undue delay (Art 16(1); PRIIPs Art 10(1)).

TriggerActionSource
At least every 12 months following first publication.Review.RTS Art 15(1)
A significant change, actual or likely.Review.RTS Art 15(1)
Risk indicator moves to another class, or the moderate scenario's mean annualised return moves more than five percentage points.Checked in the review.RTS Art 15(2)
Review shows changes are needed.Revise without undue delay; publish the revised KID on the website.RTS Art 16(1) and (3)
Detail, edge cases and sources

The revised version is made available promptly (RTS 2017/653 Art 16(1)). The 12-month count runs from first publication. A review is also due on any change that significantly affects, or is likely to significantly affect, the KID.

The review covers more than these two tests; Article 15(2) lists them (RTS 2017/653 Art 15(2)). The KIID relief applies where the investment company, or the management company for a common fund, draws up, provides, revises and translates a compliant KID (UCITS Art 82a(2)).

How do the Irish UCITS rules fit together?

The Central Bank UCITS Regulations, S.I. 316/2026, were signed on 7 July 2026 (S.I. 316/2026) and provide Central Bank requirements for Irish UCITS; their commencement date is under To verify. An Irish UCITS takes one of four legal forms, each with its own constitutional document (reg 2).

Legal formConstitutional documentNote
Unit trust.Trust deed.A UCITS unit trust is outside the Unit Trusts Act 1990 (s.2).
Investment company.Memorandum and articles.—
Common contractual fund.Deed of constitution.—
ICAV.Instrument of incorporation.Registered by the Central Bank (ICAV Act s.5, s.9).
Detail, edge cases and sources

S.I. 316/2026 provides Central Bank requirements alongside the UCITS Regulations 2011, and provides for revoking the 2019 Regulations. Regulation 131 provides for revoking the 2019 Regulations and their 2023 amendment (reg 131). It defines the "UCITS Regulations" as S.I. 352/2011, as amended (S.I. 316/2026 reg 2).

S.I. 316/2026 provides Irish depositary rules beyond the Directive. Regulation 119 provides that listed duties are carried out in Ireland and not delegated (reg 119(1)). It covers breaches by the UCITS or depositary of the UCITS Regulations, Central Bank requirements or the prospectus. The depositary notifies the Central Bank promptly of a material breach. It also does so for a non-material one still unresolved four weeks after it learns of it, and records are kept at least six years (reg 119(3) to (5)). Regulation 121 provides that a depositary may not share a director with the management company, the administrator or the UCITS investment company. Its appointment ends only on revocation of the UCITS authorisation or appointment of a replacement (reg 121). A depositary within reg 35(2)(c) of the UCITS Regulations has at least two Irish-resident directors (reg 117(2)). A new depositary is approved in advance by the Central Bank (reg 32).

An ICAV's sole object is collective investment (ICAV Act s.9). An umbrella UCITS provides in its constitutional document that each sub-fund's assets belong only to that sub-fund and may not discharge another sub-fund's liabilities (S.I. 316/2026 reg 29). An umbrella ICAV with segregated liability says so on its letterheads and written agreements (ICAV Act s.36). A sub-fund is not a separate legal person, but the ICAV may sue and be sued for a particular sub-fund (s.37). The Central Bank UCITS Regulations page and the ICAV Act page cover each in full.

Frequently asked questions

Can the depositary delegate cash monitoring?

No. Oversight and cash-monitoring duties cannot be delegated to third parties. Only safekeeping may be delegated, and only under the Article 22a conditions (UCITS Art 22a(1) and (2)).

Must investors be told about a loss?

Yes. Once the management company or investment company has ascertained a loss of a custody instrument, investors are notified immediately in a durable medium (Reg. 2016/438 Art 18(2)).

Is a KID still needed if it was reviewed last year with no change?

The 12-month review is still due, counted from first publication. A revision follows only if the review shows changes are needed (RTS 2017/653 Art 15(1); Art 16(1)).

In practice: where custody will be delegated, document the objective reason and choose the delegate with due care. Then monitor that it keeps meeting Article 22a; delegation leaves the depositary's liability unchanged. Diarise each KID's review at least every 12 months from first publication, and review sooner on a change that significantly affects, or is likely to significantly affect, the KID.

To verify

Changelog

1 change to the law and guidance · latest 2026-07-07
  • 2026-07-07 — The Central Bank UCITS Regulations, S.I. 316/2026, were signed (Schedule 11 signature). Regulation 131 provides for revoking the 2019 Central Bank UCITS Regulations (S.I. 230/2019) and the 2023 amendment (reg 131).
↑ Top