HKMA published a set of guiding principles on consumer protection aspects in respect of the use of big data analytics and artificial intelligence or BDAI. The principles, which are applicable to all authorized institutions, are focused on four major areas: governance and accountability, fairness, transparency and disclosure, and data privacy and protection. HKMA states that the authorized institutions should adopt a risk-based approach commensurate with the risks involved in their big data analytics and artificial intelligence applications when applying these guiding principles.
HKMA specifies the following guiding principles:
- Governance and Accountability—The board and senior management of the authorized institutions should remain accountable for all the big data analytics and artificial intelligence driven decisions and processes. They should ensure the use of appropriate governance, oversight, and accountability framework, appropriate level of explainability of the big data analytics and artificial intelligence models, and proper validation before launch of big data analytics and artificial intelligence applications. The board and management should also focus on ongoing reviews and adherence to the consumer protection principles set out in the Code of Banking Practice.
- Fairness—The authorized institutions should ensure that big data analytics and artificial intelligence models produce objective, consistent, ethical, and fair outcomes to customers. These outcomes include compliance with the applicable laws, customer access to basic banking services, and robust models of big data analytics and artificial intelligence driven models.
- Transparency and Disclosure—The authorized institutions should provide appropriate level of transparency to customers regarding their big data analytics and artificial intelligence applications through proper, accurate, and understandable disclosure. They should provide explanations of the types of data used and how the models affect the big data analytics and artificial intelligence driven decisions, on customer request and where appropriate.
- Data Privacy and Protection—The authorized institutions should implement effective protection measures to safeguard customer data. These institutions should ensure compliance with the Personal Data (Privacy) Ordinance and should pay regard to the relevant good practices issued by the Privacy Commissioner for Personal Data.
Keywords: Asia Pacific, Hong Kong, Banking, Artificial Intelligence, Fintech, Consumer Protection, Big Data, Guidance, HKMA
Previous ArticleBCBS Issues Guiding Principles to Operationalize Sectoral CCyB
The Prudential Regulation Authority (PRA) published the final policy statement PS21/21 on the leverage ratio framework in the UK. PS21/21, which sets out the final policy of both the Financial Policy Committee (FPC) and PRA
The Consumer Financial Protection Bureau (CFPB) proposed to amend Regulation B to implement changes to the Equal Credit Opportunity Act (ECOA) under Section 1071 of the Dodd-Frank Act.
The Prudential Regulation Authority (PRA) decided to maintain, at the 2019 levels, the buffer rates for the Other Systemically Important Institutions (O-SII) for another year, with no new rates to be set until December 2023.
The Financial Stability Board (FSB) published a progress report on implementation of its high-level recommendations for the regulation, supervision, and oversight of global stablecoin arrangements.
In a letter to the authorized deposit taking institutions, the Australian Prudential Regulation Authority (APRA) announced an increase in the minimum interest rate buffer it expects banks to use when assessing the serviceability of home loan applications.
The Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) are consulting on the preliminary guidance that clarifies that stablecoin arrangements should observe international standards for payment, clearing, and settlement systems.
The European Banking Authority (EBA) and the European Insurance and Occupational Pensions Authority (EIOPA) have set out their respective work priorities for 2022.
The Malta Financial Services Authority (MFSA) updated the guidelines on supervisory reporting requirements under the reporting framework 3.0, in addition to the reporting module on leverage under the common reporting (COREP) framework.
The European Commission (EC) published the Implementing Decision 2021/1753 on the equivalence of supervisory and regulatory requirements of certain third countries and territories for the purposes of the treatment of exposures, in accordance with the Capital Requirements Regulation or CRR (575/2013).
EC published the Implementing Regulation 2021/1751, which lays down implementing technical standards on uniform formats and templates for notification of determination of the impracticability of including contractual recognition of write-down and conversion powers.