Regulation 2006
Regulations Governing Internal Operating Systems and Procedures for the Outsourcing of Financial Institution Operation
Issued by Financial Supervisory Commission
Plain-English summary
Issued under Art. 45-1(3) of the Banking Act. Outsourcing needs a written agreement and board-approved internal rules (Arts. 2 and 4), is limited to listed operations unless the FSC approves others (Arts. 3 and 5), and material irregularities go to the FSC and the Central Bank (Art. 6(2)). Art. 18 requires FSC approval for overseas outsourcing of material retail financial information systems, and Art. 19 sets cloud-service controls. The Banking Bureau database shows it announced on 18 September 2006 and last modified on 13 April 2026.
Who it applies to
Banking
Topics
Cybersecurity & IT Risk Operational Risk & Outsourcing
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Outsourcing of financial institution operations | Before outsourcing; ongoing | FSC | source | |
Art. 3 limits outsourcing to listed categories and requires institutions to report outsourced operations to the FSC; other operations need FSC approval under Art. 5. Art. 6(2) requires material irregularities to be reported to the FSC and the Central Bank as soon as possible. Art. 18 requires FSC approval before overseas outsourcing of material retail financial information systems, and Art. 19 sets cloud-service policies, encryption and data location rules. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.