2022-04-12

Regulations amending Finansinspektionen’s regulations regarding activities of payment service providers

Finansinspektionen amends its regulations to require payment service providers to report serious operational or security incidents. Providers must submit initial reports within four hours of classification, updated information within three business days, and final details within 20 business days after operations normalize. These regulations entered into force on 1 April 2022.

Finansinspektionen logo

Sweden

Finansinspektionen

Click to view thumbnail

Finansinspektionen’s Regulatory Code Publisher: Chief Legal Counsel Eric Leijonram, Finansinspektionen, Sweden, www.fi.se ISSN 1102-7460 This translation is furnished solely for information purposes. Only the printed version of the regulation in Swedish applies for the application of the law. 1 Regulations amending Finansinspektionen’s regulations (FFFS 2018:4) regarding activities of payment service providers; decided on 15 March 2022. Finansinspektionen prescribes pursuant to section 5, section 13 of the Institutions for Payment Services Ordinance (2010:1008) that Chapter 6, section 4 of Finansinspektionen’s regulations (FFFS 2018:4) regarding activities of payment service providers shall have the following wording. Chapter 6 4 § A payment service provider shall report to Finansinspektionen the occurrence of a serious operational incident or security incident in its operations. For its reporting, the provider shall use the form for serious incidents that is available on Finansinspektionen’s website. The information shall be provided in accordance with sections A–C of the form in the manner described in more detail on Finansinspektionen’s website

  1. within four hours from when an operational incident or a security incident has been classified as serious (Section A),
  2. with updated information when such is available and no later than within three business days from when the information pursuant to point 1) were submitted (section B), and
  3. no later than 20 business days after thee operations function normally again (section C).

These regulations shall enter into force on 01 April 2022. ERIK THEDÉEN Gunilla Lundgren FFFS 2022:6 Published on 21 March 2022