The Hong Kong Monetary Authority (HKMA) granted a restricted banking license to Korea Development Bank (incorporated in the Republic of Korea) under the Banking Ordinance. HKMA also imposed pecuniary penalties of HKD 44,200,000 against China Construction Bank (Asia) Corporation Limited (CCBA), CTBC Bank Co., Ltd., Hong Kong Branch (CTBCHK), Industrial and Commercial Bank of China (Asia) Limited (ICBCA), and UBS AG, Hong Kong Branch (UBSHK) as well as issued orders for remedying the contraventions where warranted. The investigations followed a series of on-site examinations conducted by HKMA on banks’ systems and controls for compliance with the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). Additionally, HKMA issued guidance to authorized institutions on sharing of personal data of customers for direct marketing by third parties.
Given the special trust relationship between authorized institutions and their customers and considering that some of the third parties are not subject to any regulatory regime like that of authorized institutions, for the sake of better safeguarding personal data of banking customers, HKMA considers that the banking industry should aspire to a higher standard regarding sharing of customers’ personal data with third parties for the purpose of direct marketing. Under the guidance, there are two general approaches that authorized institutions may adopt for sharing customers’ personal data for direct marketing by third parties by:
- asking customers to directly approach the third parties such that the customers may provide their personal data directly to the third parties; or
- redirecting the customers from authorized institutions’ website/mobile apps to the websites/mobile apps of the third parties for provision of their personal data and/or consent for direct marketing by such third parties.
The guidance also stipulates how redirection should be made, the types of customers’ personal data that may be shared with third parties in different circumstances under the redirection approach, and other guiding principles on the sharing of customers’ personal data to third parties. The guidance will take effect on January 01, 2022 such that any new applicable initiatives to be launched by authorized institutions from that date should comply with the guidance. For authorized institutions’ existing applicable arrangements, authorized institutions are expected to comply with the guidance as soon as practicable and in any case not later than six months from the effective date (that is, by June 30, 2022).
Keywords: Asia Pacific, Hong Kong, China, Banking, Bank Licenses, AMLO, AML/CFT, Penalty, Internal Controls, Operational Risk, Data Sharing, Guidance, HKMA
Previous ArticleESMA Updates Q&A, Sets Out Standards on Benchmark Transition
The finalization of the two sustainability disclosure standards—IFRS S1 and IFRS S2—is expected to be a significant step forward in the harmonization of sustainability disclosures worldwide.
Decentralized finance (DeFi) is expected to increase in prominence, finding traction in use cases such as lending, trading, and investing, without the intermediation of traditional financial institutions.
The Basel Committee on Banking Supervision (BCBS) published reports that assessed the overall implementation of the net stable funding ratio (NSFR) and the large exposures rules in the U.S.
At the global level, supervisory efforts are increasingly focused on addressing climate risks via better quality data and innovative use of technologies such as generative artificial intelligence (AI) and blockchain.
The finalization of the IFRS sustainability disclosure standards in late June 2023 has brought to the forefront the themes of the harmonization of sustainability disclosures
The European Banking Authority (EBA) recently issued several regulatory publications impacting the banking sector.
The Basel Committee on Banking Supervision (BCBS) launched a consultation on revisions to the core principles for effective banking supervision, with the comment period ending on October 06, 2023.
The U.S. banking agencies (FDIC, FED, and OCC) recently proposed rules implementing the final Basel III reforms, also known as the Basel III Endgame.
The Financial Stability Board (FSB) recently published the second annual progress report on the July 2021 roadmap to address climate-related financial risks.
The recognition of climate change as a systemic risk to the global economy has further intensified regulatory and supervisory focus on monitoring of the environmental, social, and governance (ESG) risks.