A credit rating agency shall publicly disclose the following matters on its company website:
When a credit rating agency makes any of the announcements under subparagraphs 2 and 3 of the preceding paragraph, it shall note any limitations in the data that were analyzed as well as risks that cannot be reflected by the credit rating. The credit rating agency must also use appropriate labeling to distinguish ratings for structured instruments or unsolicited ratings, and explain the meanings of such labeling, and shall publicly disclose the following matters:
- Its business report, to be published within three months after the close of each fiscal year.
- Its credit rating procedures and methodologies, and key assumptions employed, and, in the event of any changes, the reasons for the change, the discrepancies, and the impact on the current ratings shall also be published.
- In conducting initial rating, surveillance rating, adjustment of ratings, and withdrawal of ratings, the credit rating agency shall immediately publish the credit rating result and the rating reasons, and the historical rating results for the past five years, except in cases where the rating is not intended for public use.
- Any of the following circumstances that is likely to cause a conflict of interest, if the circumstance is related to any individual credit rating, shall be published along with the credit rating results:
- The fee policy for providing the credit rating service.
- Any related services that the credit rating agency provides for the rated entity, or the issuer, originator, arranger, or underwriter of the rated instrument.
- The credit rating agency provides an initial rating evaluation prior to being engaged to conduct the rating.
- Any other conflict of interest that may affect the credit rating.
- Definitions of the credit rating scales for each class of credit ratings.
- An employee code of conduct.
The business report of paragraph 1 shall include the following items:
- For credit ratings of structured instruments, the sensitivity analysis of the key assumptions, loss test and cash flow analysis, and the due diligence process used by the credit rating agency as a basis of assessment shall also be published.
- For unsolicited ratings, the level of participation by the rated entity in the rating process, and the information that such entity provides shall also be published.
- A company profile, including the date of establishment, company history, organizational system, and the equity structure of the directors, supervisors, or major shareholders holding more than a 10 percent stake in the company. When a director or supervisor is a juristic person shareholder representative, it shall note the name of the juristic person shareholder and its shareholding ratio, and the names of the top ten shareholders and their shareholding ratios shall also be noted.
- Business overview, which shall include the following:
- Credit rating criteria, methodologies, models, and rating assumptions, and their differences from the previous year, and how the differences affect the ratings.
- The content of outsourced work.
- The credit ratings issued during the previous year and information on changes in the credit ratings, including the number of cases for each class of credit ratings, and the ratios of rating maintenance, rating upgrades, rating downgrades, default ratings, and rating withdrawals.
- The rates of default ratings for the most recent 10 years, and analysis of the transition matrix for the most recent 1, 3, 5, and 10 years for each class of credit ratings.
- The name and the percentage of operating income accounted for by any client, or any client in combination with its affiliated entities, whose contribution to operating income exceeds 10 percent.
- Financial condition, including the percentage of total operating income accounted for by credit rating services income, and the percentage of total operating income accounted for by operating income unrelated to credit rating services.
- A review and analysis of the company's financial condition and business development.
- Risk management matters, including, but not limited to operational risk, reputational risk, legal risk, and information security risk.
- Litigious or non-litigious events: If any major litigious, non-litigious, or administrative dispute that has been concluded by a final and unappealable judgment or is still pending could materially affect the company's finances or business, disclose the facts of the dispute, amount of money at stake in the dispute, the date of commencement of litigation, and the status of the dispute's handling as of the date of printing of the business report. If the credit rating agency is a branch office established in Taiwan by an internationally recognized credit rating agency, it also shall disclose any above-mentioned information of its head office.
- Matters of special note.