LexGo

Benelux Regulators to Apply EIOPA Guidelines on Outsourcing to Cloud Service Providers by Insurance and Reinsurance Undertakings
14/08/2020

On 24 April 2020, the European Insurance and Occupational Pensions Authority (EIOPA) issued new guidelines on outsourcing to cloud service providers (the "Guidelines") which apply to insurance and reinsurance undertakings, supplementing the general regulatory framework based on the Solvency II Directive and Delegated Regulation 2015/35. 

Pursuant to Article 16(3) of Regulation (EU) No 1094/2010 establishing the EIOPA, which requires the competent authorities of the EU Member States to make every effort to comply with EIOPA guidelines and confirm that they intend to comply with them, the Benelux regulators have indicated their intention to apply the Guidelines. 

In Belgium, the prudential regulator for the insurance and reinsurance sector, the National Bank of Belgium ("NBB"), published a circular on 5 May 2020 (NBB_2020_018) implementing the Guidelines and clarifying the NBB's recommendations on outsourcing to cloud service providers active in the sector (available here). 

For many years, the prudential regulator of the Netherlands, the Dutch National Bank ("DNB"), has been actively been focusing on outsourcing by financial institutions, including insurance companies, to cloud service providers. EIOPA guidelines are deemed authoritative by the DNB, taken into account by the DNB and often form the basis for the DNB's own recommendations. One example is the DNB's Good Practice document for outsourcing insurers, issued in May 2019. In this document, the DNB refers extensively to the outsourcing provisions of the EIOPA Guidelines on System of Governance. The DNB applies these guidelines, specifically when supervising cloud outsourcing, to supplement the Good Practices. The DNB has indicated that it expects insurers to apply the Guidelines from 1 January 2021 to all cloud outsourcing agreements entered into or amended on or after this date. 

In Luxembourg, the supervisory authority for the insurance sector, the Commissariat aux Assurances ("CA"), confirmed in Circular 20/13 of 24 June 2020 that it will fully apply the Guidelines. Luxembourg insurance and reinsurance undertakings are therefore required to abide by the Guidelines. On this occasion, the Luxembourg regulator also recalled that outsourcing operations must comply with the obligation of professional secrecy set out in Article 300 of the amended Act of 7 December 2015 on the insurance sector. 

For further information about the scope, requirements and timeline for implementation of the Guidelines, please refer to our article on the EIOPA Guidelines on outsourcing to cloud service providers by insurance and reinsurance undertakings.

Voir aussi : Nautadutilh Avocats Luxembourg SĂ rl ( Mr. Vincent Wellens )

[+ http://www.nautadutilh.com]

Mr. Vincent Wellens Mr. Vincent Wellens
Partner
[email protected]

Tous les articles Droit bancaire

Derniers articles Droit bancaire

Application of MiFID to Luxembourg IFMs
11/06/2021

The CSSF clarifies under what circumstances and the extent to which MiFID rules apply to IFMs, their third-party delegates...

Application of MiFID to Luxembourg IFMs Read more

Modernisation of the Law of 22 March 2004 on securitisation
03/06/2021

A draft Bill of law No. 7825 (the “Bill”) amending the Law of 22 March 2004 on securitisation (the “Secu...

Modernisation of the Law of 22 March 2004 on securitisation Read more

Implementation of new EU framework relating to covered bonds
02/06/2021

A draft bill (7822/00) relating to the issuance of covered bonds was recently deposited to implement EU Directive 2019/216...

Read more

Bill amending the Luxembourg Securitisation Act published
28/05/2021

Bill No 7825 (the Bill), which aims, amongst other things, to amend the Act of 2 March 2004 on securitisation, as ame...

Read more

Derniers articles de Mr. Vincent Wellens

Insufficient cybersecurity measures under GDPR: 100k EUR fine in Belgium & key fines elsewhere
29/04/2021

On 26 April 2021, the Litigation Chamber of the Belgian Data Protection Authority (BDPA) handed down its first fine specif...

Read more

Regulatory changes in the audiovisual media sector
16/04/2021

The Act of 26 February 2021 and certain grand ducal regulations have transposed into Luxembourg law the Audiovisual Media ...

Read more

New bill brings Luxembourg to the forefront of distributed ledger technology
17/03/2021

On 22 January 2021 Parliament approved Bill 7637, which modified:  the Law of 5 April 1993 on the financial sec...

Read more

The Sky Is Not the Limit: Space Activities in Luxembourg
15/02/2021

At the end of 2020, Luxembourg adopted the Act of 15 December 2020 on space activities (loi du 15 décembre 2020 por...

Read more

LexGO Network