The December 2021 compliance deadline looms near. Has the Covid-19 pandemic and lack of additional guidance paused your institutions’ focus on compliance?
If so, now is the time to re-evaluate outsourcing policies to ensure compliance, updating template contracts and documents accordingly and consider all of your organisation’s supplier arrangements to establish whether they fall within the Guidelines and if contractual documents need to be updated.
Firms in the financial services sector and their suppliers should now be used to dealing with the European Banking Authority’s guidelines on outsourcing (Guidelines), which came into force for new contracts in September 2019.
Although the Prudential Regulatory Authority (PRA) released its consultation paper on the Guidelines in December 2019, the submission deadline was extended due to Covid-19 and it closed in October 2020. The PRA has yet to publish the findings and outcomes of the consultation process, which may be subject to further consideration regarding the impact of the UK’s departure from the EU.
Whilst the Guidelines have been in force since 2019, the Covid-19 pandemic and the delay in the PRA providing additional practical guidance has paused or had an impact on many institutions’ focus on resolving and addressing outstanding compliance issues.
The December 2021 compliance deadline has not gone away and institutions still need to ensure they comply with the Guidelines by this deadline. Interestingly our experience so far has been that institutions have taken different approaches to compliance. Some are re-negotiating all contracts, preparing additional addendums to roll out to multiple suppliers; and others focusing only on compliance in relation to new contracts.
As a reminder, the Guidelines are intended to be an update to the existing regulatory regime for banks when outsourcing functions, as set out in SYSC8 and MiFID II, as well as building on existing guidelines for outsourcing services to the cloud. The Guidelines have been produced following increasing interest from the European and UK regulators on how banks and other financial services firms use and rely on IT and digital services in an increasingly complex technology landscape.
The Guidelines set out the expectations on banks in several areas, which are:
The Guidelines state a number of clear exceptions, but the PRA’s view is that the majority of arrangements with third parties should be considered outsourcing by default. As such, the focus should be on what is critical and important, so that appropriate measures can be taken both contractually and operationally. Intra-group outsourcing is permitted but must be objectively justifiable. It should be subject to arm's length contractual conditions and a separate sub-set of requirements, particularly where the intra-group outsourcing is to countries outside of the EEA. For full details of the guidelines, please see our webinar here.
You should be re-evaluating your outsourcing policy to ensure compliance, and update template contracts and documents accordingly. You also need to consider all of your organisation’s supplier arrangements (including intra-group arrangements) to establish whether they fall within the Guidelines and if contractual documents need to be updated.
Contracts for outsourced services must be updated now for new agreements. For arrangements that were already in place on or before 30 September 2019, firms should make required changes on renewal and at the latest by 31 December 2021.
We have supported a number of clients with bringing their existing outsourcing arrangements in line with the Guidelines. TLT has developed a series of product offerings, combining people, process and technology to assist institutions with efficient, accurate contract compliance.
Using our TLT One online platform, we configure the platform to your requirements, working with your team to ensure EBA compliance.
TLT appointed to Vodafone's global legal panelRead more
Rules for large corporates on climate-related financial disclosures:...Read more
Making a claim for Covid-19 business interruption lossesRead more
Will brokers face professional negligence surrounding business...Read more
TLT’s Fintech School – trainee interviewRead more
Beyond BrexitRead more
Beyond Brexit: services trackerRead more
TLT advises SilverTree Equity on acquisition of Orbus SoftwareRead more
TLT launches Fintech School with MMURead more
Watch our video series for information on the legal issues that are affecting the real estate sector. Each...Read more
Helping you navigate your business through the risks and opportunities that Brexit will bring.Read more
The way people shop is constantly evolving, from the growth of online and the changing use of stores...Read more
The widespread disruption and closure of businesses caused by the Covid-19 pandemic and the subsequent national and local lockdowns has brought into sharp focus the question of available insurance cover for losses under...Read more
The pandemic has had a deep and long-lasting effect on the leisure, food & drink sector, forcing operators to embrace new ways of attracting and servicing customers.Read more
The pandemic has forced the majority of the workforce into a world of remote working. As a result, our cities are evolving.Read more
There's a growing demand for retailers to do more to attract the Purple Pound – the collective spending power of disabled shoppers, estimated to be worth around £274bn. We look at the opportunities, the legal issues and...Read more
Green finance is gaining speed, driven by global climate change pressures and the recognition of the vital role which sustainability plays in a resilient financial services sector.Read more
Keep on top of the employment law issues that matter most to you and your business with our new podcast.Read more