Segregation of assets

(1) An institution that carries on qualified crypto custody business must ensure that the cryptographic instruments and private cryptographic keys of customers are kept segregated from the cryptographic instruments and private cryptographic keys of the institution. Where the cryptographic instruments of several customers are kept in pooled custody (omnibus custody), it must be ensured that the shares of the individual customers in the total pooled holding can be determined at any time.
(2) The institution must ensure that the cryptographic instruments and private cryptographic keys of the customer held in custody may not be disposed of, without the customer's express consent, for the institution's own account or for the account of another person.