EIOPA Guidelines On Outsourcing To Cloud Service Providers

On 6 February 2020, the European Insurance and Occupational Pensions Authority ("EIOPA") has published its final guidelines (the "EIOPA Guidelines") on outsourcing to cloud service providers ("CSPs") ¹.

On 24 June 2020, the Luxembourg supervisory authority of the insurance sector, the Commissariat aux Assurances ("CAA"), has issued a Circular Letter 20/13, in which the CAA confirms that it has informed EIPOA that the CAA will apply the EIOPA Guidelines and invites the insurance and reinsurance undertakings subject to its supervision to comply with the latter.

The CAA has further specified in such Circular Letter 20/13 that the provisions of the EIOPA Guidelines apply without prejudice to the rules provided for in Article 300 of the amended law of 7 December 2015 on the financial sector, which refers to the duty to professional secrecy.