The purpose of the Regulation on Information Systems of Banks and Electronic Banking Services is to establish the minimum procedures and principles to be followed in managing the information systems that banks use in carrying out their activities, in providing electronic banking services and in managing the related risks, as well as the information systems controls that must be put in place.
This Regulation was published in the Official Gazette No. 31069 dated 15 March 2020 and will enter into force on 1 July 2020.
The Regulation meets the regulatory need in newly emerging areas or areas undergoing significant development, such as internet banking, mobile banking, open banking services and cloud computing, and also provides more comprehensive rules on matters previously covered by the communique.
The Regulation sets out provisions on what must be done to ensure the transmission and security of personal and sensitive data, on querying such data and retaining the records of those queries, and on restricting their transfer abroad.
The Regulation also governs the committees authorized in information systems governance, together with their duties and responsibilities, and introduces rules on the security of information systems.
Any information containing sensitive data or data in the nature of a secret that banks send to their customers electronically must now be sent through the channels over which electronic banking services are offered. An obligation to prepare an inventory of information assets was also introduced.
It was further stipulated that banks may not share or transfer information in the nature of customer secrets to third parties, whether in Turkey or abroad.
Finally, among other matters, the Banking Regulation and Supervision Agency (BRSA) was authorized to grant exemptions for institutions covered by the new rules (the committees, units and responsible persons to be established).
The full text of the Regulation is available at the link below.
https://www.resmigazete.gov.tr/eskiler/2020/03/20200315-10.htm
