Time to Mobilise: EBA finalises Guidelines on Outsourcing Arrangements

Following consultation in the second half of 2018, the European Banking Authority (“EBA“) published its Final Report on Draft Guidelines on Outsourcing Arrangements (the “Guidelines“) on 25 February 2019.

Most provisions of the Guidelines will enter into force on 30 September 2019. At the same time, the Guidelines will replace those issued by the EBA’s predecessor organisation, the Committee of European Banking Supervisors (“CEBS“), in 2006 and will also incorporate the EBA’s 2017 Recommendation on Outsourcing to Cloud Service Providers which came into effect on 1 July 2018. Continue reading

EBA publishes guidance on (i) outsourcing to cloud service providers and (ii) ICT Risk Assessment by competent authorities

On 18 May 2017, the European Banking Authority (“EBA“) published its draft recommendations on outsourcing to cloud service providers (the “EBA Recommendations“). Under Article 16 of the Regulation (EU) No 1093/2010, the EBA is required to issue guidelines and recommendations addressed to both national competent authorities (NCAs) and financial institutions, with a view to establishing consistent, efficient and effective supervisory practices and ensuring the “common, uniform and consistent application of the European Union Law”.

Continue reading