Information and cyber security for financial services firms

This overview is a guide to the Lexis+® UK Financial Services sub-topic Information and cyber security for financial services firms with links to appropriate materials.

General Data Protection Regulation

The General Data Protection Regulation (EU) 2016/679 (EU GDPR) applies to the processing of personal data originating in the EEA.Assimilated Regulation (EU) 2016/679 (UK GDPR) applies in the UK.

For information, see Practice Notes:

•
Introduction to the EU GDPR and UK GDPR
•
Financial services firms—legal obligation and legitimate interest under the GDPR—one minute guide
•
Outsourcing by financial services firms—UK MiFID II Organisational Regulation, FCA Handbook, PRA Rulebook and UK GDPR—checklist
•
The Data Protection Act 2018
•
Key definitions under data protection law
•
Data protection principles
•
Processing personal data—standard of consent
•
How to manage consent—personal data
•
Data portability
•
UK GDPR and EU GDPR—extra-territorial reach
•
UK

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Financial Services News

EPC seeks service provider for VoP scheme test environment

The European Payments Council (EPC) has launched a request for proposal (RFP) for the selection of a technology service provider in charge of providing, operating and supporting a test environment for the validation and self-certification of the verification of payee (VOP) API (both server-side and client-side) by the scheme participants. Responses are sought by 17 January 2025.

FCA’s 2024 consumer focus still has firms guessing

Law360, London: The Financial Conduct Authority (FCA) shifted further toward results-based financial regulation in 2024 by requiring regulated companies to comply better with its Consumer Duty, forcing managers to make individual interpretations of the regime's often ambiguous requirements where more specific rules are missing.

Financial Services—other developments (23/12/2024)

A round-up of other developments, which have not been covered in full by the LexisNexis Financial Services practical guidance team but may nevertheless be of interest.

ECB fines BNP Paribas Fortis SA/NV for intentionally breaching credit risk reporting rules

The European Central Bank (ECB) has imposed an administrative penalty of €10.4m on BNP Paribas Fortis SA/NV for reporting miscalculated risk-weighted assets for credit risk. The bank may challenge the ECB’s decision before the Court of Justice of the European Union.

View Financial Services by content type :

News