Regulatory Compliance Matrix: Regulation of Financial Services, Information and Communication Technology, and Generally Related Matters

Guido Reinke is as a certified auditor and assurance professional advising firms in matters of regulation, corporate governance, and compliance programmes. His industry specialism is financial services and information and communication technology. After employment by the European Commission, he worked for regulated industries and at Big Four professional services firms. He holds a Doctorate in Politics and International Relations from the University of London, and has lectured on Regulatory Governance at the London School of Economics.

• PREFACE ACKNOWLEDGEMENTS LIST OF FIGURES INTRODUCTION A. What regulatory compliance is and how it is defined B. What are the costs of non-compliance? Part A: Costs for the individuals and single organisations 1. Financial penalties 2. Operational costs 3. Personal implications 4. Regulatory consequences Part B: Systemic costs for the whole industry 1. Financial penalties 2. Operational costs 3. Personal implications 4. Regulatory consequences C. The myth: Regulation is complicated D. How can the Regulatory Compliance Matrix can help? E. How are the most effective regulatory compliance programmes carried out? Phase 1: Scope and Prioritisation (Regulatory Compliance Matrix) Phase 2: Conduct a risk assessment Phase 3: Define control activities and reporting requirements Phase 4: Undertake an effectiveness review Phase 5: Document findings and make recommendations for improvement Phase 6: Make an assessment of compliance maturity (RC Maturity Model) Phase 7: Prioritisation of activities (Heatmaps and Action Quadrant Diagram) Phase 8: Action Plans (Roadmaps) F. Who should use this reference guide? G. The main objectives of this guide H. What experience may be required to carry on regulatory compliance? I. How dangerous is this book? ABOUT THE REGULATORY COMPLIANCE MATRIX PART 1FINANCIAL SERVICES LAWS AND REGULATIONS Financial Services Authorities and Key Influencers (1) Global Level - Authorities (non-US) (2) Global Level - Authorities (US) (3) European Level - Authorities (4) National Level (EU Member States) - Authorities (5) National Level (UK) - Authorities 1.1Regulatory Agencies 1.1.1European Supervisory Authorities 1.1.2Credit Rating Agencies 1.1.3Resolution and Recovery 1.1.4Enforcement procedures 1.2General Regulations 1.2.1Stability and capital requirements 1.2.2Capital Markets Union and General banking regulation 1.2.3Transactions, accounts and payment systems 1.2.4Corporate conduct, culture and ethics 1.2.5Markets regulation: records-keeping, transparency and market abuse 1.2.6Mergers & Acquisitions (Financial Services specific) 1.2.7Insolvency (Financial Services specific) 1.2.8Risk Management 1.3Financial Crime and consumer protection 1.3.1Financial Crime: Anti-Money Laundering, sanctions and terrorism 1.3.2Consumer protection (Financial Services specific) 1.4Retail banking 1.4.1Consumer credit, mortgages and lending 1.4.2Savings and transactional accounts 1.5Investment banking 1.5.1Investment products and funds 1.5.2Securities and Foreign Exchange 1.5.3Derivatives 1.6Insurance 1.7Pensions PART 2ICT LAWS AND REGULATIONS Information and Communications Technology - Regulatory Authorities and Key Influencers (1) Global Level - Authorities (non-US) (2) European Level - Authorities (3) National Level (EU Member States) - Authorities (4) National Level (UK) - Authorities 2.1Market regulation of the Information Society 2.1.1Market liberalisation and regulation framework 2.1.2The New Regulatory Framework 2.1.3Trans-European Networks (TEN) 2.2Internet regulation 2.2.1Safer Internet Use 2.3Telecommunications 2.3.1Wireless policy 2.3.2Access and interconnection 2.3.3Satellites 2.4Digital media and content 2.4.1Digital interactive television 2.4.2Digital content 2.5Radio services and equipment 2.5.1Radio interference 2.5.2Compatibility 2.5.3Radio equipment 2.6Audiovisual services 2.6.1 The audiovisual services industry 2.7Environment ("Green IT") 2.7.1Green IT 2.8Other ICT-specific norms 2.8.1Wireless and fixed line 2.8.2Data storage and power management PART 3GENERAL LAWS AND REGULATIONS Regulatory Authorities that regulate all industry sectors and Key Influencers (1) Global Level - Authorities (non-US) (2) Global Level - Authorities (US) (3) European Level (EU Member States) - Authorities (4) National Level (UK) - Authorities 3.1Business regulation 3.1.1Company law and associated responsibilities (incl. company formation) 3.1.2Insolvency and Mergers & Acquisitions 3.1.3Corporate governance, accounting, audit and risk management 3.1.4Disclosure of electronic documents within civil litigation and official investigations 3.1.5Anti-bribery and corruption ("ABC") 3.1.6Public procurement 3.1.7Contract law and competition 3.1.8Finance and taxation law 3.2Consumer protection and employment law 3.2.1Consumer protection and Alternative Dispute Resolution 3.2.2Work and employment 3.2.3Health and Safety 3.3Information security 3.3.1Electronic signatures 3.3.2Network security and security products (applications) 3.3.3Cybercrime 3.3.4Security for passports and visas 3.4Data protection and privacy rights 3.4.1General data protection and privacy 3.4.2Records management and data retention 3.4.3Pan-European data transfer 3.4.4Access to information and investigations 3.5Intellectual property rights 3.5.1General 3.5.2Copyright 3.5.3Patents 3.5.4Trade marks and designs 3.5.5Legal protection of hardware 3.5.6Legal protection of software 3.5.7Domain names 3.6Electronic commerce 3.6.1e-Commerce regulation for applications and services 3.6.2e-Government BIBLIOGRAPHY INDEX