MAS Proposes Notices on Management of Services Outsourced by Banks
MAS is consulting on notices for management of "outsourced relevant services," which include certain cloud services, by banks and merchant banks in Singapore. Once the proposed notices take effect, MAS Notices 634 and 11082 will be repealed. Banks and merchant banks are expected to comply with the proposed notices when disclosing customer information to service providers under the exceptions permitted in the Third Schedule to the Banking Act. The comment period for the consultation ends on January 29, 2021. A bank or a merchant bank will need to comply with the requirements that relate to outsourcing agreements within 12 months of the date of issuance of the proposed notices, or from the date on which the bank or merchant bank enters into a new agreement or renews an existing agreement, whichever is later.
Services that are covered as outsourced relevant services include public cloud services such as software-as-a-service, platform-as-a-service, and infrastructure-as-a-service. Other services in this category are information technology helpdesks services, data center operations or data center facility management services, express letter and parcel delivery services, and card embossing services. MAS also proposed that relevant services that are not for the conduct of banking business and where the service provider does not have access to a bank or merchant bank's confidential or customer information be considered as exempted outsourced relevant services, and not be subject to the proposed Notices given the nature of such services. To help the industry determine which relevant services are outsourced relevant services, MAS is proposing to set out:
- A non-exhaustive list of relevant services that are commonly performed by banks or merchant banks (Annex A of the proposed notices)
- An exhaustive list of relevant services that are not commonly performed by banks or merchant banks and thus, are excluded from the definition of outsourced relevant service (Annex B of the proposed notices)
- An exhaustive list of relevant services, that are not commonly performed by banks or merchant banks, but are considered by MAS as outsourced relevant services and thus, are subject to relevant requirements in the proposed notices (Annex C of the proposed notices)
Comment Due Date: January 29, 2021
Keywords: Asia Pacific, Singapore, Banking, Merchant Banks, Outsourcing, Cloud Computing, SAAS, MAS
Previous Article
FIN-FSA Makes Several Regulatory AnnouncementsRelated Articles
BIS Innovation Hub Sets Out Work Program for 2021
BIS Innovation Hub published the work program for 2021, with focus on suptech and regtech, next-generation financial market infrastructure, central bank digital currencies, open finance, green finance, and cyber security.
EC Plans to Consult on Crisis Management and EDIS Framework Revisions
In an article published by SRB, Mairead McGuinness, the European Commissioner for Financial Services, Financial Stability, and Capital Markets Union, discussed the progress and next steps toward completion of the Banking Union.
EBA Finalizes Remuneration Standards for Investment Firms in EU
EBA finalized the two sets of draft regulatory technical standards on the identification of material risk-takers and on the classes of instruments used for remuneration under the Investment Firms Directive (IFD).
ECA Recommends Actions to Enhance Resolution Planning for Banks
EC published, in the Official Journal of the European Union, a notification that the European Court of Auditors (ECA) has published a special report on resolution planning in the Single Resolution Mechanism.
BoE Publishes Key Elements of the 2021 Stress Testing for Banks in UK
BoE published a scenario against which it will be stress testing banks in 2021, in addition to setting out the key elements of the 2021 stress test, guidance on the 2021 stress test, and the variable paths for the 2021 stress test.
PRA Proposes Rules on Identity Verification of Depositor Protection
PRA published a consultation paper (CP3/21) proposes rules regarding the timing of identity verification required for eligibility of depositor protection under the Financial Services Compensation Scheme (FSCS).
FSB Publishes Work Program for 2021
FSB published the work program for 2021, which reflects a strategic shift in priorities in the COVID-19 environment.
FCA Issues Update on Move to New Data Collection Platform
FCA announced that 50% firms have started using the new data collection platform RegData, which is slated to replace the existing platform known Gabriel.
Bundesbank Publishes Derivation Rules for Reporting by Banks
Bundesbank published Version 5.0 of the derivation rules for completeness check at the form level, with respect to the data quality of the European harmonized reporting system.
FED Revises Capital Planning and Stress Testing Requirements for Banks
FED finalized a rule that updates capital planning requirements to reflect the new framework from 2019 that sorts large banks into categories, with requirements that are tailored to the risks of each category.
