EIOPA Reports Outline Work Done Under EU-US Insurance Dialogue Project
EIOPA published reports summarizing the work of the big data working group, the cyber insurance market group, and the insurer cybersecurity working group under the EU-U.S. Insurance Dialogue Project. The reports summarize the topics under discussion, work done in 2019, and the next steps for discussion and action. The EU-U.S. Insurance Project started in early 2012, when EC, EIOPA, NAIC, and FIO agreed to participate in a deeper dialog project to contribute to an increased mutual understanding and enhanced cooperation between the EU and U.S. to promote business opportunity and effective supervision in EU and U.S. The high-level common objectives of the EU-U.S. Insurance Dialogue are to promote the free flow of information between EU and U.S. supervisors, establish a robust regime for group supervision, achieve a consistent approach within each jurisdiction, and ensure the consistent application of prudential requirements.
The Big Data Working Group has been focusing on the increased use of large data sets (Big Data) by insurers and the use of data analytics in the insurance sector. After discussion, the Working Group has outlined the following areas for potential discussion in 2020/2021:
- The further development of artificial intelligence principles in the U.S. and EU including ethical aspects
- Regulatory review of predictive models, including but not limited to assessing transparency and explainability issues arising from the use of machine learning algorithms.
- Industry use of Big Data for fraud detection and claims settlement
- Continue monitoring developments on third-party vendors and consumer disclosure issues
The Cyber Insurance Working Group, in 2019, as a follow-up to the work done in 2018, continued discussions with a focus on the assessment of non-affirmative cyber risk and the potential for catastrophic losses; the challenges and opportunities of insuring and reinsuring cyber risk; and the availability of cyber insurance data. One of the main challenges to further development of the cyber insurance markets in the U.S. and EU relates to the limited data to appropriately assess and quantify cyber risk exposure. Against this background, themes for further elaboration may include the following:
- Discussing approaches to collect data and develop techniques supporting more sophisticated assessment of cyber risks. including potential accumulation risks (for example, scenario-based stress testing)
- Sharing U.S. and EU approaches relative to cyber incident reporting and cyber incident response best practices, including discussion of whether global initiatives could facilitate further understanding and underwriting of cyber risks
- Discussing the current role and use of risk
The Insurer Cybersecurity Working Group’s 2019 Target Outcome or deliverables included further discussions to continue to share examples and approaches to insurer cybersecurity and post-incident coordination Another outcome involved further discussions in moving forward with creating an outline or template for scenarios for an insurance supervisor-only exercise on how to coordinate a cross-border response in the event of an international cybersecurity incident. Insurance sector cybersecurity is a continuing challenge and a matter for ongoing supervisory focus in both the U.S. and EU. The Insurer Cybersecurity Working Group, therefore, recommends continuing its ongoing work in the following areas:
- Continue to share information on insurer cybersecurity and operational resilience including, for example, discussing insurance industry approaches to managing cybersecurity risk; supervisory approaches to reviewing insurers’ cybersecurity measures; the challenges of tracking cyber risks in the EU and the U.S.; preventing and managing a cross-border cyber event from both a supervisory and industry perspective; and the cybersecurity implications of insurers’ increased outsourcing to the cloud
- Complete development of an initial cybersecurity exercise template for EU and U.S. supervisors on how to coordinate a cross-border response in the event of an international cybersecurity incident
- Expand current draft scenario(s) in the template, including scenario timelines with a progression of events mimicking those likely during a real cybersecurity incident and include a list of supervisory contacts
- Develop a timeline for conducting an exercise using the template created by the working group
Related Links
Keywords: Europe, Americas, EU, US, Insurance, Big Data, Artificial Intelligence, Machine Learning, Cyber Risk, Cyber Insurance, EIOPA
Previous Article
EIOPA Finalizes Methodological Principles for Insurer Stress TestingRelated Articles
EC Issues Regulation on Adjustments to K-Factor Coefficients Under IFR
The European Commission (EC) published a report summarizing responses to the targeted consultation on the supervisory convergence and the single rulebook in the European Union (EU).
OSFI Issues Results of Pilot on Climate Risk Scenario Analysis
The Office of the Superintendent of Financial Institutions (OSFI) published an update on the discussion paper that intended to engage federally regulated financial institutions and other interested stakeholders in a dialog with OSFI, to proactively enhance and align assurance expectations over key regulatory returns.
ECB Issues Opinions on Green Bonds Standard and CRR Proposals
The European Central Bank (ECB) published its opinion on a proposal for a regulation on European green bonds, following a request from the European Parliament.
ESRB Explores Policy Response to Risks Arising from Digitalization
The Advisory Scientific Committee (ASC) of the European Systemic Risk Board (ESRB) published a report that explores the expected impact of digitalization on provision of financial and banking services, and proposes policy measures to address the risks stemming from digitalization.
EU Authorities Address COVID-19 Reporting, MCD, and PSD2 Issues
The European Banking Authority (EBA) announced that the guidelines on the reporting and disclosure of exposures subject to measures COVID-relief measures shall continue to apply until further notice.
FI Publishes Multiple Regulatory and Reporting Updates
The Swedish Financial Supervisory Authority (FI) announced that the capital adequacy reporting as at December 31, 2021 must be done by February 11, 2022.
BSP Tackles Aspects of Lending and Islamic, Open & Sustainable Finance
The Central Bank of the Philippines (BSP) issued communications covering developments related to online lending platforms, open finance framework and roadmap, and on the expected regulations in the area sustainable finance.
US Agencies Issue Regulatory Updates, FDIC Launches Tech Sprint
The Board of Governors of the Federal Reserve System (FED) published the final rule that amends Regulation I to reduce the quarterly reporting burden for member banks by automating the application process for adjusting their subscriptions to the Federal Reserve Bank capital stock, except in the context of mergers.
EBA Issues Guide on Bank Resolvability, Consults on Transferability
The European Banking Authority (EBA) published its assessment of risks through the quarterly Risk Dashboard and the results of the Autumn edition of the Risk Assessment Questionnaire (RAQ).
MFSA Publishes CRD5 Updates and Supervisory Priorities for 2022
The Malta Financial Services Authority (MFSA) updated the guidelines on supervisory reporting requirements under the reporting framework 3.0.
