Luxembourg
01 March 2017
Reporter: Stephanie Palmer
ITAS: TAs given stark warning on data security
Transfer agents must be aware of, and reactive to, the increasing importance of cyber security, according to William Long, partner at law firm Sidley Austin.

Speaking at ITAS Luxembourg, Long told attendees that every business represented in the room “will be affected by a cyber security incident”.

Coping with the fallout from a cyber security attack “can be extremely painful”, resulting in job losses, a direct impact on profits, and reputational damage and a subsequent dip in share prices.

When the EU’s General Data Protection Regulation (GDPR) comes into effect next year, a cyber breach could also lead to “mouth-wateringly large” fines, Long said, of up to 4 percent of annual global turnover, a deliberately “persuasive figure”.

The new regulation mandates a more controlled process around gaining consent to use a client’s data, introduces a right to object to automated data profiling and a right to erasure, meaning clients can, in some cases, request data to be deleted. It also introduces the potential for individuals to file damages claims in the case of a data breach, even for non-financial loss.

In the financial services space, Long said, firms will have to take a “privacy-by-design, privacy-by-default” approach to data, only collecting the minimum amount and building privacy into processed and procedures in an “antithesis to the world of big data”.

The new rules also mean that where a vendor processes data on behalf of an asset manager, “service agreements will have to be amended”.

To manage cyber risk and the impending new regulatory requirements, Long said risk mitigation is key. Firms should determine their risk profile and get procedures and policies in place to prepare for a data breach, clarifying what the “crown jewels” are, where they are, and who is looking after them.

“Frankly,” Long asked, “are they up to the job?” He advised attendees to first identify the relevant people to have on a breach response team, with coordination between human resources, IT, legal and governance teams.

More technology news
The latest news from Asset Servicing Times
Join Our Newsletter

Sign up today and never
miss the latest news or an issue again

Subscribe now
LSEG and IBM partner for SME blockchain
20 July 2017 | London | Reporter: Drew Nicol
The framework will be built on Hyperledger Fabric version 1.0 and hosted by The Linux Foundation
New OMS launches to support firms in MiFID II
19 July 2017 | London | Reporter: Stephanie Palmer
London-based financial technology start-up Hedgd has launched its cloud-based order management system, to support firms in compliance with the second Markets in Financial Instruments Directive
European banks join forces for SME blockchain venture
14 July 2017 | Paris | Reporter: Drew Nicol
Paris Europlace, along with seven European banking partners, has launched LiquidShare, post-trading blockchain infrastructure for the small and medium enterprise market
Financial institutions seeking blockchain buffs
13 July 2017 | London | Reporter: Stephanie Palmer
The increased use of blockchain technology in financial services is leading institutions to seek new recruits with skills in the technology, according to research from recruiter Robert Half
Hyperledger Fabric 1.0 goes live
12 July 2017 | London | Reporter: Drew Nicol
Blockchain developer Hyperledger has achieved a “huge milestone” with the launch of Hyperledger Fabric 1.0, according to IBM chief technology officer of open technology Chris Ferris
R3 working with Intel on Corda security
12 July 2017 | New York | Reporter: Stephanie Palmer
R3 is collaborating with Intel to improve data privacy and security for Corda, its distributed ledger technology platform
Profile acquires treasury software provider
11 July 2017 | London | Reporter: Stephanie Palmer
Financial solution provider Profile Software is set to acquire 100 percent of Login, an international provider of treasury software
More technology news