RegAlert2023-09-26 | Resolução BCB 342Added
BCB Resolution No. 342 — Amends the Pix Operating Regulations to Mandate Security Incident Notification to Account Holders and Updates the Pix Penalty Manual
The resolution mandates Pix participants to notify natural person account holders of security incidents involving personal data related to Pix components or infrastructure, regardless of whether the participant is responsible for the incident or if the risk is deemed low. It updates the Pix Penalty Manual to define specific infractions for failing to meet technical security requirements or to notify incidents, establishing penalty criteria based on the type of institution, the participant's share of SPI transactions, and the percentage of compromised Pix keys. Weighting factors for fine calculations are set in three tables, assigning multipliers ranging from 0.5 to 25 depending on institutional classification and the scale of the security breach.
BCB published 15 documents in the last 30 days — get each new one by email the day it lands.
BCB Resolution No. 342, OF SEPTEMBER 26, 2023
Amends the Regulation annexed to BCB Resolution No. 1, of August 12, 2020, which governs the operation of the Pix payment arrangement, to provide for the notification to holders of the occurrence of a security incident involving personal data, and amends Annexes I and II to BCB Resolution No. 177, of December 22, 2021 (Pix Penalty Manual), to provide for non-compliance with Pix technical security requirements and for the criteria for applying penalties.
Read the rest free, and get an email when BCB publishes again
Lineage: In force
Show all related documents (7)
- Amends
- Resolution No. 177 dated 2021-12-22not in RegAlert
- Issued under
- Lei n.º 4.595, de 31 de dezembro de 1964 — dispõe sobre a política e as instituições monetárias, bancárias e creditícias (establishes the National Financial System and the Banco Central do Brasil)1964Communication No. 32.927 dated 2018-12-21not in RegAlertCommunication No. 34.085 dated 2019-08-28not in RegAlertLaw No. 10.214 dated 2001-03-27not in RegAlertLaw No. 12.865 dated 2013-10-09not in RegAlertResolution No. 4.282 dated 2013-11-04not in RegAlert
Source: Banco Central do Brasil — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from BCB
BCB published 15 documents in the last 30 days. We email you each new one the day it's published.