UCITS in practice: depositary, PRIIPs KID and Irish rules
Every UCITS has a single depositary that oversees dealing and NAV, monitors cash and safekeeps assets. It must replace a lost custody asset, unless it proves an external event beyond its reasonable control. The consequences must have been unavoidable despite all reasonable efforts (UCITS Directive Arts 22 and 24). Since 1 January 2023, a PRIIPs key information document (KID) must be drawn up and published before a UCITS is made available to retail investors. No separate KIID is then required. That holds where the investment company, or a common fund's management company, draws up, provides, revises and translates the KID (PRIIPs Art 32; UCITS Art 82a).
- Depositary
- One per UCITS, in the home Member State, from the categories that Member State allows.UCITS Art 22(1) · Art 23
- Core duties
- Oversight of dealing, valuation, instructions, settlement and income; cash-flow monitoring; custody and ownership checks.UCITS Art 22(3) to (5)
- Liability
- Returns a lost custody asset without undue delay, unless it proves an unavoidable external event beyond its control.UCITS Art 24
- Retail document
- PRIIPs KID, published before retail availability; the UCITS exemption ended on 31 December 2022.PRIIPs Art 5 · Art 32
- KID review
- At least every 12 months and on any significant change; revise without undue delay if needed.RTS 2017/653 Art 15 · Art 16
- Irish rulebook
- S.I. 316/2026, signed on 7 July 2026 (Sch 11); commencement is under To verify.S.I. 316/2026 reg 2 · reg 131
Which UCITS need a depositary, and who can act?
An investment company, and a management company for each common fund it manages, appoints a single depositary (UCITS Art 22(1)). The depositary has its registered office or an establishment in the UCITS home Member State (Art 23(1)). No company may act as both management or investment company and depositary (Art 25(1)).
| Eligible entity | Condition | Source |
|---|---|---|
| National central bank | Where the Member State allows. | Art 23(2)(a), (3) |
| Credit institution | Authorised under Directive 2013/36/EU, where the Member State allows. | Art 23(2)(b) |
| Other legal entity | Authorised for depositary activities, supervised, and meeting the Art 23(2) capital and organisational requirements, where the Member State allows. | Art 23(2)(c) |
Detail, edge cases and sources
Each Member State decides which eligible categories it allows (Art 23(3)). Eligible categories are a central bank, an EU credit institution, or another entity meeting the Article 23(2)(c) conditions. An "other legal entity" is authorised for depositary activities, with capital and own-funds minimums. It is under prudential regulation and ongoing supervision, and meets the Art 23(2) organisational requirements.
A written contract governs the appointment. It is made with the investment company, or the management company for each common fund, and covers at least sixteen items. Among them are services by asset type, safekeeping by country, termination and hand-over, and information flows. Escalation and the depositary's right to enquire and visit on site are also covered (Delegated Regulation 2016/438, Art 2(1) and (2)). One contract may cover several common funds, unless national law requires otherwise. It names the law that governs it (Art 2(4) and (5)). The Delegated Regulation applies from 13 October 2016 (Art 25).
A depositary may carry out other tasks that could conflict with its role only if it separates them functionally and hierarchically. The conflicts must also be identified, managed, monitored and disclosed to investors (UCITS Art 25(2)).
What does a UCITS depositary do?
The depositary has three sets of duties (UCITS Art 22(3) to (5)): oversight, cash monitoring and custody. It holds financial instruments in custody and verifies ownership of other assets. It may delegate safekeeping, under conditions, but never oversight or cash monitoring (Art 22a(1)).
- Oversight: dealing, valuation, instructions, settlement and income checked against national law and the fund documents, ex post (Art 22(3); Reg. 2016/438 Art 3(2)).
- Cash monitoring: cash flows reconciled daily, or on each movement if infrequent (Art 22(4); Reg. 2016/438 Art 10(1)(b)).
- Custody: registrable instruments held in segregated accounts in the name of the UCITS or its manager (Art 22(5)(a)).
- Other assets: ownership verified and recorded (Art 22(5)(b)).
- No reuse: custody assets are not reused, except on four conditions, including collateral above market value (Art 22(7)).
Detail, edge cases and sources
The depositary oversees how the management company deals in units, values them, applies income and settles trades. It monitors the UCITS cash flows. Under oversight, dealing and unit valuation follow national law and the fund documents. Instructions are carried out unless they conflict with them. Consideration is remitted within the usual time limits, and income is applied correctly. Under cash monitoring, subscription payments are received and cash is booked properly. Instruments that can be registered in the depositary's books sit in segregated accounts. Ownership of other assets is verified from documents and, where available, external evidence, and a record is kept up to date.
Instruments that can be physically delivered to the depositary are always in its custody scope. Instruments registered directly in the UCITS name with the issuer or its agent only, such as a transfer agent, are not held in custody (Reg. 2016/438 Art 12(2) and (3)). The depositary carries out the manager's instructions unless they conflict with national law or the fund rules (UCITS Art 22(3)(c)).
Reuse of custody assets needs all four conditions. It is for the account of the UCITS, on the manager's instructions, and for the benefit of the UCITS and its investors. It is also covered by high-quality, liquid collateral received under a title transfer arrangement. The collateral's market value must at all times be at least the market value of the reused assets plus a premium (UCITS Art 22(7)).
Safekeeping may be delegated only if the depositary does not aim to avoid the Directive and can show an objective reason. It applies due skill, care and diligence in choosing and appointing the delegate, except an investor CSD, and in reviewing and monitoring it. A custody delegate is under effective prudential regulation, capital rules and supervision, has an external periodic audit, and segregates client assets (UCITS Art 22a(2) and (3)). A narrow exception applies in a third country whose law requires a local entity, while no compliant local entity exists. Investors must be informed before investing, and the UCITS must instruct the delegation (Art 22a(3)).
If the depositary or an EU custody delegate becomes insolvent, the UCITS assets held in custody are not available to its creditors (UCITS Art 22(8)). For a third-country delegate, the depositary ensures that the delegate receives independent legal advice that the local insolvency law recognises the segregation (Reg. 2016/438 Art 17(2)(a)).
When is the depositary liable for a lost asset?
Where a financial instrument held in custody is lost, the depositary returns an identical instrument or the corresponding amount without undue delay (UCITS Art 24(1)). It escapes liability only by proving an external event beyond its reasonable control, with consequences unavoidable despite all reasonable efforts. Delegation and contract cannot reduce it; an excluding agreement is void (Art 24(2) to (4)).
→
→
→
→
→
Detail, edge cases and sources
A loss is deemed in three cases. A stated right of ownership is shown not to be valid. The UCITS is definitively deprived of its ownership. Or it is definitively unable to dispose of the instrument. An instrument substituted by, or converted into, another is not deemed lost (Reg. 2016/438 Art 18(3)). The management or investment company ascertains a loss by a documented process; investors are then notified immediately in a durable medium (Art 18(2)).
Delegation does not affect this liability, and no agreement may exclude or limit it; such an agreement is void (Art 24(2) to (4)). Step 4 asks whether the depositary could reasonably have prevented the event with the precautions of a diligent depositary under common industry practice. Step 5 asks whether it could have prevented the loss with documented, rigorous and comprehensive due diligence.
The external-event defence needs all three conditions in Article 19(1) (Reg. 2016/438 Art 19(1)). Natural events beyond human control, government or court acts affecting the instruments, and war, riots or other major upheavals may meet points (a) and (b). The depositary must still prove the due-diligence condition in point (c) (Art 19(2)). An accounting error, operational failure, fraud or a failure to segregate does not (Art 19(3)).
The defence needs a proven external event beyond the depositary's control, with consequences unavoidable despite all reasonable efforts. Delegation and contract cannot reduce this liability.
For other losses, the depositary is liable where they result from its negligent or intentional failure to fulfil its obligations under the Directive (UCITS Art 24(1)).
How independent must the depositary be from the manager?
No company may be both management company and depositary (UCITS Art 25(1)). Article 21 bars three overlaps of board seats and employment (Reg. 2016/438 Art 21). Where the two have a "link" or share a group, the management or investment company documents why it chose that depositary (Art 22).
| Relationship | What the Delegated Regulation requires | Source |
|---|---|---|
| Any. | No shared management-body members, and no cross-employment of board members. | Art 21 |
| Link or group link. | A documented comparison with unlinked depositaries, and a report. | Art 22(2) |
| Group link. | At least one third of the members, or two persons if lower, are independent. | Art 24(1) |
Detail, edge cases and sources
Article 21 applies to any relationship. No one sits on both management bodies; no manager board member employed by the depositary; no depositary board member employed by the manager or investment company. A link or group link needs a documented comparison with depositaries that have no link, and a report on it (Art 22(2)). The two may have a 10% holding or significant-influence "link", or belong to one group.
For a group link, the independence rule applies to each management body where it also has the supervisory functions, otherwise to each supervisory body (Art 24(1)). A separate supervisory body may also arise. There, no more than one third of its members may also sit on, or work for, the other side (Reg. 2016/438 Art 21). A "link" is a direct or indirect holding of 10% or more of capital or votes. A holding giving significant influence over management also counts. A "group link" means membership of the same group under Article 2(11) of Directive 2013/34/EU (Reg. 2016/438 Art 1). An independent member is not a member of the management or supervisory body, or an employee, of another group undertaking. It also has no business, family or other relationship that creates a conflict impairing its judgment (Art 24(2)).
What must the management company have in place?
Directive 2010/43/EU sets the management company's organisation (Directive 2010/43 Art 12). It keeps a permanent risk management function, independent of its operating units, unless a proportionate derogation applies. It keeps a written conflicts-of-interest policy (Art 18).
- Risk management: a permanent, independent function, unless a proportionate derogation applies (Art 12(1) and (2)); a documented policy (Art 38(1)).
- Conflicts: a written policy sized to the firm, taking group circumstances into account (Art 18(1)).
- Records: orders recorded immediately; records kept at least five years (Art 15(1); Art 16(1)).
- Complaints: prompt handling, each complaint recorded, filed free of charge (Art 6).
Detail, edge cases and sources
Records of orders and transactions are kept for at least five years (Arts 14 to 16). Investors may complain, and get information on the procedure, free of charge (Art 6). The risk management function is hierarchically and functionally independent, and a Member State may allow the proportionate derogation. The documented risk policy covers market, liquidity, sustainability, counterparty and operational risks. The firm takes all reasonable steps to centralise and record received subscription and redemption orders immediately.
The conflict criteria include a likely gain, or an avoided loss, at the expense of the UCITS. Another case is an inducement beyond the standard commission or fee (Directive 2010/43 Art 17(1)). A competent authority may require records to be kept longer than five years in exceptional circumstances (Art 16(1)). Remuneration rules are outside this guide.
Does a UCITS need a PRIIPs KID, and when?
Yes, before it is made available to retail investors. The UCITS exemption ended on 31 December 2022 (PRIIPs Art 32(1)). The investment company, or the management company for a common fund, may draw up, provide, revise and translate a compliant KID. That KID then satisfies the UCITS key investor information rules, and no KIID may be required (UCITS Art 82a).
| Who | Duty | Source |
|---|---|---|
| Manufacturer | Draws up the KID and publishes it on its website before retail availability. | PRIIPs Art 5(1) |
| Adviser or seller | In good time before the retail investor is bound; after the deal only on all four Art 13(3) conditions. | Art 13(1) to (3) |
| Manufacturer, adviser and seller | Complaint arrangements, with a substantive reply to a KID complaint. | Art 19 |
Detail, edge cases and sources
UCITS managers and sellers were exempt from PRIIPs until 31 December 2022 (PRIIPs Art 32(1)). The manufacturer publishes the KID before the product is made available to retail investors (PRIIPs Art 5(1)). The adviser or seller may also provide it to a person with written authority to decide for the investor (Art 13). A complaint about the KID gets a substantive reply in a timely and proper manner, and cross-border redress is available (Art 19).
A "retail investor" is a MiFID II retail client. An insurance customer who would not be a professional client also counts (PRIIPs Art 4(6)). The KID duties attach to making a product available, and providing it, to retail investors (Arts 5 and 13). The post-sale route needs all four conditions. The investor starts a distance sale, and prior provision is not possible. The investor is told it may delay the deal to read the KID, and consents (Art 13(3)).
"Good time" means early enough for the investor to consider the document, whether or not a cooling-off period applies. The adviser or seller weighs the investor's knowledge and experience and the product's complexity. Where the investor initiated the deal, it also weighs any urgency the investor expressly states (RTS 2017/653 Art 17). The manufacturer is not civilly liable on the KID alone unless it is misleading, inaccurate or inconsistent with the binding documents or Article 8. A retail investor who shows loss from relying on it may then claim damages under national law, and no contract term may limit that liability (PRIIPs Art 11).
What goes in a UCITS KID?
The KID is pre-contractual information: a stand-alone document of at most three A4 sides, separate from marketing material (PRIIPs Art 6). The RTS sets the 1-to-7 risk indicator and four performance scenarios (RTS 2017/653 Art 3), and the cost tables (Art 5).
- Language: an official language where distributed, or another the authority accepts (PRIIPs Art 7(1) and (2)).
- Sections: what the product is; risks and return; what happens if the manufacturer cannot pay out; costs; holding period; complaints; other information (Art 8(3)).
- Risk indicator: classes 1 to 7; the manufacturer may raise it, documented (RTS Annex II).
- Scenarios: stress, unfavourable, moderate and favourable (RTS Art 3(3)).
- Costs: totals in money and percentage, and by type (RTS Art 5(2) and (3)).
Detail, edge cases and sources
The KID follows a fixed order of sections with set headings (PRIIPs Art 8(3)). If marketing documents in the distribution state use official languages, the KID uses at least those (PRIIPs Art 7(2)). The risk indicator combines market and credit risk. Total costs are shown over set periods, with one-off, recurring and incidental costs.
The market risk class has seven bands of VaR-equivalent volatility, from below 0.5% to 80% or more (RTS 2017/653 Annex II, point 2). The overall indicator combines that class with the credit risk class (Annex II, point 52). A manufacturer may increase the indicator where it does not reflect the risks; that decision is documented (point 52a).
Recurring costs separate portfolio transaction costs from other recurring costs. Incidental costs include performance fees and carried interest (RTS Art 5(3)). The PRIIPs Regulation's full text is summarised on the PRIIPs law page.
How often must the KID be reviewed?
The manufacturer reviews the KID at least every 12 months from first publication. It also reviews it on any change that significantly affects, or is likely to significantly affect, its information (RTS 2017/653 Art 15(1)). Where a review shows a change is needed, it revises the KID without undue delay (Art 16(1); PRIIPs Art 10(1)).
| Trigger | Action | Source |
|---|---|---|
| At least every 12 months following first publication. | Review. | RTS Art 15(1) |
| A significant change, actual or likely. | Review. | RTS Art 15(1) |
| Risk indicator moves to another class, or the moderate scenario's mean annualised return moves more than five percentage points. | Checked in the review. | RTS Art 15(2) |
| Review shows changes are needed. | Revise without undue delay; publish the revised KID on the website. | RTS Art 16(1) and (3) |
Detail, edge cases and sources
The revised version is made available promptly (RTS 2017/653 Art 16(1)). The 12-month count runs from first publication. A review is also due on any change that significantly affects, or is likely to significantly affect, the KID.
The review covers more than these two tests; Article 15(2) lists them (RTS 2017/653 Art 15(2)). The KIID relief applies where the investment company, or the management company for a common fund, draws up, provides, revises and translates a compliant KID (UCITS Art 82a(2)).
How do the Irish UCITS rules fit together?
The Central Bank UCITS Regulations, S.I. 316/2026, were signed on 7 July 2026 (S.I. 316/2026) and provide Central Bank requirements for Irish UCITS; their commencement date is under To verify. An Irish UCITS takes one of four legal forms, each with its own constitutional document (reg 2).
| Legal form | Constitutional document | Note |
|---|---|---|
| Unit trust. | Trust deed. | A UCITS unit trust is outside the Unit Trusts Act 1990 (s.2). |
| Investment company. | Memorandum and articles. | — |
| Common contractual fund. | Deed of constitution. | — |
| ICAV. | Instrument of incorporation. | Registered by the Central Bank (ICAV Act s.5, s.9). |
Detail, edge cases and sources
S.I. 316/2026 provides Central Bank requirements alongside the UCITS Regulations 2011, and provides for revoking the 2019 Regulations. Regulation 131 provides for revoking the 2019 Regulations and their 2023 amendment (reg 131). It defines the "UCITS Regulations" as S.I. 352/2011, as amended (S.I. 316/2026 reg 2).
S.I. 316/2026 provides Irish depositary rules beyond the Directive. Regulation 119 provides that listed duties are carried out in Ireland and not delegated (reg 119(1)). It covers breaches by the UCITS or depositary of the UCITS Regulations, Central Bank requirements or the prospectus. The depositary notifies the Central Bank promptly of a material breach. It also does so for a non-material one still unresolved four weeks after it learns of it, and records are kept at least six years (reg 119(3) to (5)). Regulation 121 provides that a depositary may not share a director with the management company, the administrator or the UCITS investment company. Its appointment ends only on revocation of the UCITS authorisation or appointment of a replacement (reg 121). A depositary within reg 35(2)(c) of the UCITS Regulations has at least two Irish-resident directors (reg 117(2)). A new depositary is approved in advance by the Central Bank (reg 32).
An ICAV's sole object is collective investment (ICAV Act s.9). An umbrella UCITS provides in its constitutional document that each sub-fund's assets belong only to that sub-fund and may not discharge another sub-fund's liabilities (S.I. 316/2026 reg 29). An umbrella ICAV with segregated liability says so on its letterheads and written agreements (ICAV Act s.36). A sub-fund is not a separate legal person, but the ICAV may sue and be sued for a particular sub-fund (s.37). The Central Bank UCITS Regulations page and the ICAV Act page cover each in full.
Frequently asked questions
Can the depositary delegate cash monitoring?
No. Oversight and cash-monitoring duties cannot be delegated to third parties. Only safekeeping may be delegated, and only under the Article 22a conditions (UCITS Art 22a(1) and (2)).
Must investors be told about a loss?
Yes. Once the management company or investment company has ascertained a loss of a custody instrument, investors are notified immediately in a durable medium (Reg. 2016/438 Art 18(2)).
Is a KID still needed if it was reviewed last year with no change?
The 12-month review is still due, counted from first publication. A revision follows only if the review shows changes are needed (RTS 2017/653 Art 15(1); Art 16(1)).
In practice: where custody will be delegated, document the objective reason and choose the delegate with due care. Then monitor that it keeps meeting Article 22a; delegation leaves the depositary's liability unchanged. Diarise each KID's review at least every 12 months from first publication, and review sooner on a change that significantly affects, or is likely to significantly affect, the KID.
To verify
- Commencement of S.I. 316/2026. Regulation 115 refers to the date of commencement without stating it (S.I. 316/2026 reg 115).
- Professional-only share classes. Whether a class sold only to professionals is a distinct PRIIP for Articles 5 and 13. If no KID is prepared for it, what KIID duty remains under UCITS Articles 78 to 82a (PRIIPs Art 5; Art 13; UCITS Art 82a).
Changelog
1 change to the law and guidance · latest 2026-07-07
- 2026-07-07 — The Central Bank UCITS Regulations, S.I. 316/2026, were signed (Schedule 11 signature). Regulation 131 provides for revoking the 2019 Central Bank UCITS Regulations (S.I. 230/2019) and the 2023 amendment (reg 131).