MAS Proposes Notices on Management of Services Outsourced by Banks
MAS is consulting on notices for management of "outsourced relevant services," which include certain cloud services, by banks and merchant banks in Singapore. Once the proposed notices take effect, MAS Notices 634 and 11082 will be repealed. Banks and merchant banks are expected to comply with the proposed notices when disclosing customer information to service providers under the exceptions permitted in the Third Schedule to the Banking Act. The comment period for the consultation ends on January 29, 2021. A bank or a merchant bank will need to comply with the requirements that relate to outsourcing agreements within 12 months of the date of issuance of the proposed notices, or from the date on which the bank or merchant bank enters into a new agreement or renews an existing agreement, whichever is later.
Services that are covered as outsourced relevant services include public cloud services such as software-as-a-service, platform-as-a-service, and infrastructure-as-a-service. Other services in this category are information technology helpdesks services, data center operations or data center facility management services, express letter and parcel delivery services, and card embossing services. MAS also proposed that relevant services that are not for the conduct of banking business and where the service provider does not have access to a bank or merchant bank's confidential or customer information be considered as exempted outsourced relevant services, and not be subject to the proposed Notices given the nature of such services. To help the industry determine which relevant services are outsourced relevant services, MAS is proposing to set out:
- A non-exhaustive list of relevant services that are commonly performed by banks or merchant banks (Annex A of the proposed notices)
- An exhaustive list of relevant services that are not commonly performed by banks or merchant banks and thus, are excluded from the definition of outsourced relevant service (Annex B of the proposed notices)
- An exhaustive list of relevant services, that are not commonly performed by banks or merchant banks, but are considered by MAS as outsourced relevant services and thus, are subject to relevant requirements in the proposed notices (Annex C of the proposed notices)
Comment Due Date: January 29, 2021
Keywords: Asia Pacific, Singapore, Banking, Merchant Banks, Outsourcing, Cloud Computing, SAAS, MAS
Previous Article
FIN-FSA Makes Several Regulatory AnnouncementsRelated Articles
ESAs Issue Multiple Regulatory Updates for Financial Sector Entities
The three European Supervisory Authorities (ESAs) issued a letter to inform about delay in the Sustainable Finance Disclosure Regulation (SFDR) mandate, along with a Call for Evidence on greenwashing practices.
ISSB Makes Announcements at COP27; IASB to Propose IFRS 9 Amendments
The International Sustainability Standards Board (ISSB) of the IFRS Foundations made several announcements at COP27 and with respect to its work on the sustainability standards.
IOSCO Prioritizes Green Disclosures, Greenwashing, and Carbon Markets
The International Organization for Securities Commissions (IOSCO), at COP27, outlined the regulatory priorities for sustainability disclosures, mitigation of greenwashing, and promotion of integrity in carbon markets.
EBA Finalizes Methodology for Stress Tests, Issues Other Updates
The European Banking Authority (EBA) issued a statement in the context of COP27, clarified the operationalization of intermediate EU parent undertakings (IPUs) of third-country groups
OSFI Sets Out Work Priorities and Reporting Updates for Banks
The Office of the Superintendent of Financial Institutions (OSFI) published an annual report on its activities, a report on forward-looking work.
APRA Finalizes Changes to Capital Framework, Issues Other Updates
The Australian Prudential Regulation Authority (APRA) finalized amendments to the capital framework, announced a review of the prudential framework for groups.
BIS Hub and Central Banks Conduct CBDC and DeFI Pilots
The Bank for International Settlements (BIS) Innovation Hubs and several central banks are working together on various central bank digital currency (CBDC) pilots.
ECB Sets Deadline for Banks to Meet Its Climate Risk Expectations
The European Central Bank (ECB) published the results of its thematic review, which shows that banks are still far from adequately managing climate and environmental risks.
ESAs, ECB, & EC Issue Multiple Regulatory Updates for Financial Sector
Among its recent publications, the European Banking Authority (EBA) published the final standards and guidelines on interest rate risk arising from non-trading book activities (IRRBB)
EC Adopts Final Rules Under CRR, BRRD, and Crowdfunding Regulation
The European Commission (EC) recently adopted regulations with respect to the calculation of own funds requirements for market risk, the prudential treatment of global systemically important institutions (G-SIIs)
