Norman and Fabrizio co-author legal article on new rules for risk retention requirement in NPE securitisations