Regulatory Alerts2018-03-02
Regulations amending Finansinspektionen’s regulations regarding information security, IT operations and deposit systems (FFFS 2018:2)
Finansinspektionen issued regulations amending FFFS 2014:5 to update requirements for information security, IT operations, and deposit systems. The amended rules apply to a defined scope of financial entities including banking companies, securities companies, and clearing undertakings, with specific provisions applying at the group level. These regulations entered into force on 1 March 2018.
Finansinspektionen’s Regulatory Code Publisher: Finansinspektionen, Sweden, www.fi.se ISSN 1102-7460 This translation is furnished for information purposes only and is not itself a legal document. 1 Regulations amending Finansinspektionen’s regulations and general guidelines (FFFS 2014:5) regarding information security, IT operations and deposit systems; decided on 23 January 2018. Finansinspektionen prescribes pursuant to Chapter 6, section 1, point 54 of the Securities Market Ordinance (2007:572) that Chapter 1, section 2 of Finansinspektionen’s regulations (FFFS 20014:5) regarding information security, IT operations and deposit systems shall have the following wording. Chapter 1 Section 2 These regulations apply to
- banking companies,
- savings banks,
- members’ banks,
- credit market companies,
- credit market associations,
- securities companies, and
- undertakings with authorisation to conduct clearing operations in accordance with Chapter 19 of the Securities Market Act (2007:528). The provisions set out in Chapters 1–3, in accordance with Chapter 3, section 4 of the Special Supervision of Credit Institutions and Investment Firms Act (2014:968), shall be applied at group or subgroup level. The provisions set out in Chapter 4 do not apply to undertakings referred to in the first paragraph, point 7.
These regulations shall enter into force on 1 March 2018. ERIK THEDÉEN Thomas Holmestål FFFS 2018:2 Published on 29 January 2018