Professional secrecy amendments - Update of article 41 of the law of 5 April 1993 related to the financial sector has been saved
Professional secrecy amendments - Update of article 41 of the law of 5 April 1993 related to the financial sector
27 February 2018
Regulatory News Alert
On 6 February 2018, the Chamber of Deputies adopted the first constitutional vote on the draft bill 7024 implementing interchange fee regulation into Luxembourgish Law and amending professional secrecy obligations for the financial sector. On 22 February 2018, the Council of State agreed to waive the second constitutional vote making the law adopted. The 7024 draft bill offered the opportunity to amend several other articles among which the key Article 41 of the law of 5 April 1993 on the financial sector. The objective of the amendments is to modernize the current provisions and to facilitate outsourcing arrangements.
Within the context of outsourcing arrangements, the amended Article 41 acknowledges that the client’s consent is an exemption to apply professional secrecy as long as the client has accepted it in accordance with the law or with the contractual conditions agreed between parties.
The governmental amendments dropped the distinction between intragroup and extra group outsourcing. As of now, the only differentiation criteria will be considered between outsourcing operated by Luxembourgish entities towards another Luxembourgish entity regulated by the CSSF, the ECB or the CAA, and all the other case of outsourcing. It creates a preferred regime where it is assumed that the professional secrecy obligations are respected for all Luxemburgish entities regulated by the CSSF, the ECB or the CAA. Besides, this regime is also extended to financial holdings in the case of a prudential review.
In addition, some of the outsourcing related provisions provided by CSSF Circular 12/552 and 17/656 have been enacted in the new law strengthening their status. It includes the following requirements:
- Outsourcing should not jeopardize the level and quality of services provided to the clients
- A service level agreement (SLA) must be concluded
- Credit institutions and investment firms retain full and sole responsibility of their obligations
- Successive sub-contracting should be previously accepted by the client
- Reasonable measures should be set up to avoid an excessive increase of operational risk
- Outsourcing of key operational functions should not significantly affect the quality of the internal control or to prevent CSSF to control the compliance
- Credit institutions and investment firms should have in place robust security measures to ensure the confidentiality and the authentication of the means of information sharing
The amendment of Article 41 facilitate outsourcing arrangements inside a same group or to external service providers. This softening of professional secrecy provision will modernize the legal framework by adjusting it to the digital era and to sustain the development of new activities such as Fintech in Luxembourg.
How can Deloitte help?
Deloitte actively monitors the latest regulatory developments and subsequent publications on an ongoing basis with its RegWatch team. We carefully analyze all relevant published documents in order to identify any changes and to provide the most updated view to our clients.
We can assist you in any of your operation lifecycle through our wide range of services:
- Compliance Assessment—gap analysis of our client’s projects compliance against laws and regulations and pragmatic recommendations for improvement
- Assisting in Communications with the Regulator—preparation (or quality assurance) of application files and participation in meetings with the regulator
- Service Provider Selection & Due Diligence
- KPIs definition and dashboard implementation
- Target operating model definition
Our team of experts is available to answer any questions you may have on this key topic for your market place and we will be pleased to facilitate a workshop to discuss the latest regulatory updates as well as potential operational impacts and remediation scenarios for your business.