On 25 October 2022, the Commission de Surveillance du Secteur Financier (CSSF) issued the Circular 22/821, replacing the Long Form Report following the requirements of Circular 01/27 as amended.
The updated framework will consist of a combination of a newly introduced self-assessment questionnaire completed directly by the underlying institutions and a series of reports and analysis produced by the réviseurs d’entreprises agréés (REA). The provisions shall apply to credit institutions incorporated under Luxembourg law, including branches, as well as Luxembourg branches of third country credit institutions.
The revision of the existing format of the Long Form Report seems to be driven by three key objectives:
Realign the Long Form Report with the supervisory and prudential points of focus,
Suppress redundancies, and
Digitalise and harmonise the data collection for a more efficient and effective supervision.
The topics covered within the SAQ are as follows: (1) Internal governance (2) IT risk, (3) Credit risk, (4) Large exposures, (5) Related parties, (6) Foreign branches, (7) MiFID, (8) PSD 2, (9) Depository bank and (10) Consolidation aspects.
2023 will be the first year in which this new framework shall apply. In scope institutions are expected to file their SAQ (based on information related to the financial year 2022) within 4 months of the closure of the financial year. As such, the first SAQs, for those entities with an end-of-year closure, will be due at the end of April 2023 at the latest. Please be aware that the 4 months filing period shall only apply in the first year of application of the new Circular. In the following year the filing period shall be reduced to 3 months.
The on-boarding of the supervised institutions through their participation in the self-assessment questionnaire is an important game-changer to the traditional approach of the Long From Report.
The similar self-assessment questionnaire for IFMs as of CSSF Circular 21/789, which was already launched last year, has underlined the challenges for the industry of such exercise. Not only did IFMs have to face the novelty of performing such self-assessment for the first time but they also had to confront the level of detail of the required data and information, which is perceived as more granular and specific in comparison to the formerly required prudential reporting.
Such challenges are likely to apply equally to Credit institutions. For MiFID purposes alone there are over 200 potential questions and related numeric data requests that must be addressed, depending on the underlying service model. Institutions, for instance, shall provide detailed numeric information with regards to the passporting activities, by individual client type (retail, professional or eligible counterparty) as well as applicable passporting regime (branch, free provision of services or tied agents). It appears challenging to ascertain and extract data for instance on an advisory mandate that is serviced exclusively in Luxembourg versus advice provided by active solicitation of a client outside of Luxembourg. Do Luxembourg banks even have such granular data with regards to the free provision of services?
Besides such level of detail and technicality, experience from the IFMs has shown that the identification of the right internal experts and contact persons as well as the set-up of a central governance structure ensuring a smooth coordination across the covered topics and the organisation is key. Understanding the underlying regulation, applying the obligations in a proportional manner to one’s business and organisation as well as identifying and extracting the right data points are vital to ensuring a correct and consistent filling of the SAQ.
While at first, the SAQ may appear as just another cumbersome and work-intensive regulatory driven reporting, it does bear its opportunities. It is a window into understanding the regulatory interpretations and positions of the CSSF. By focusing on the key data as stipulated by the SAQ, credit institutions may streamline and prioritise their controls and procedures in line with the prudential expectations of the regulator.
Institutions should carefully consider the content and the requirements introduced by Circular 22/281, in particular the applicable self-assessment obligations and the reporting timeline.
PwC would be delighted to support you on this. Based on our on-going regulatory compliance activities we have been able to assemble a team of experts with years of hands-on experience with Luxembourg-based credit intuitions for each of the key topics within the SAQ.
Amongst others we may:
Build awareness and provide market insights
Support or run the project management
Provide hands-on support in filling-in the SAQ
Perform a review and consistency check of the SAQ
Remediate any potential findings
Isabelle Melcion-Richard
Advisory Managing Director, Regulatory & Compliance, PwC Luxembourg
Tel: +352 49 48 48 2469