Article 28
Member States shall ensure that the competent authority of the home Member State (for group-wide policies and procedures) and the competent authority of the host Member State (for branches and subsidiaries) may consider an obliged entity to comply with the provisions adopted pursuant to Articles 26 and 27 through its group programme, where all of the following conditions are met: (a) the obliged entity relies on information provided by a third party that is part of the same group; (b) that group applies customer due diligence measures, rules on record-keeping and programmes against money laundering and terrorist financing in accordance with this Directive or equivalent rules; (c) the effective implementation of the requirements referred to in point (b) is supervised at group level by a competent authority of the home Member State or of the third country.