Opens in a new tab

Breaking news

CySEC Adopts New European Guidelines For Cloud Outsourcing And Updates Stress Test Protocols

The Cyprus Securities and Exchange Commission (CySEC) has taken a significant stride toward strengthening regulatory frameworks in the financial sector by implementing the latest European guidelines on cloud outsourcing. In tandem, the commission has issued an advisory regarding enhanced stress test rules for money market funds, signifying a commitment to bolstering both digital operational resilience and market stability.

Cloud Outsourcing Within Regulatory Framework

CySEC has adopted the latest European standards for outsourcing to cloud service providers, targeting select depositaries responsible for safeguarding alternative investment funds and collective investment schemes (UCITS). These guidelines are pivotal for entities that do not fall under the purview of the Digital Operational Resilience Act (DORA), ensuring that supervisory practices remain robust across the board.

Refined Scope Under Digital Operational Resilience

The evolution of the DORA regulation, which now governs digital operational resilience for the majority of financial entities within the European Union, prompted CySEC to revise the scope of its cloud outsourcing guidelines. The updated rules ensure that only the remaining depositaries not covered by DORA adhere to these specific standards, thereby maintaining regulatory relevance without duplicating oversight.

Guidelines To Navigate Cloud Outsourcing Risks

Developed under the auspices of the European Securities and Markets Authority (ESMA), the framework comprises nine detailed guidelines. These directives are designed to assist both regulators and financial entities in identifying, managing, and mitigating risks associated with cloud outsourcing. Key focus areas include the decision to migrate services to the cloud, provider selection, ongoing monitoring, and the establishment of robust exit strategies.

Enhanced Stress Test Protocols For Greater Market Stability

In a parallel move, CySEC has reaffirmed updated European guidelines concerning stress test scenarios for money market funds. Addressed primarily to managers of alternative investment funds and management companies under CySEC’s supervision, these guidelines establish common reference points for assessing the ability of funds to withstand market shocks. This uniform approach is intended to enhance risk assessment practices and fortify the resilience of the sector against potential market disruptions.

Compliance And Future Outlook

The revised cloud outsourcing guidelines and updated stress test parameters underscore a broader regulatory initiative to adapt to rapid digital innovation while maintaining rigorous supervisory standards. As these guidelines are now fully operative following their publication in all European Union languages, CySEC urges all relevant entities to ensure full compliance. The measures not only streamline the supervisory process but also provide a clear roadmap for the financial sector to navigate both technological advancements and market challenges effectively.

Cyprus Company Registration: Two To Four Days, Unless Security Checks Intervene

Cyprus aims to register companies within two to four working days when applicants submit complete documentation. However, regulatory approvals, sanctions checks, foreign ownership and national security considerations can extend the process or prevent registration.

Energy, Commerce and Industry Minister Michael Damianou outlined the timeframe in a written response to MP Efrem Christou, who asked about company formation procedures and the checks required before approval.

Fast Registration Depends On Complete Documentation

Damianou said authorities seek to process complete applications within two to four working days, regardless of a company’s structural complexity. The timeframe also depends on whether applicants pay an additional fee for expedited processing.

According to the official incorporation requirements, the standard registration fee is €165, rising to €235 for companies without share capital. Expedited processing costs an additional €100.

Applicants must submit an approved company name, a memorandum and articles of association, and forms HE1, HE2 and HE3. Public companies must also provide form HE5.

Regulated Businesses Require Additional Approval

Companies operating in certain sectors must obtain prior clearance from the relevant authorities or professional bodies. These include medical and dental businesses, law firms, insurance and reinsurance companies, and firms supervised by the Cyprus Securities and Exchange Commission.

The Central Bank of Cyprus must also approve company names associated with payment institutions, electronic money and foreign exchange services. Additional restrictions apply to educational institutions using terms such as “university” or “college”, casino operators, broadcasters and wine producers.

Non-profit organisations seeking to register without “Limited” or “Ltd” in their names also require ministerial authorisation.

Sanctions And Foreign Ownership Trigger Extra Checks

Applications involving shareholders, directors or company secretaries subject to EU, UN or US sanctions receive additional scrutiny. Registration can proceed only if the competent sanctions authority does not prohibit it. Damianou noted that US sanctions are considered indirectly but have not been incorporated into Cyprus legislation in the same way as EU and UN restrictions.

Applications involving Turkish interests are also subject to additional review. Under procedures introduced around 20 years ago, the registrar must consult national security services before proceeding with registrations involving Turkish interests or businesses that could threaten the Republic’s security.

Damianou distinguished these cases from applications submitted by Turkish Cypriots, saying there is “no substantial difference” in how their registration documents are examined. Applications may nevertheless be refused if classified information raises concerns about national interests or national security.

Public Servants Face Separate Restrictions

Under Article 65 of the public service law, government employees cannot act as directors, company secretaries or shareholders in private or public companies without prior special permission from the finance minister.

Proposed Law Would Expand Registrar’s Powers

The government is also seeking to strengthen the Registrar of Companies’ authority to address potential security risks. An amendment to the companies law, submitted to Parliament on September 17, would allow the registrar to reject applications, refuse company filings or remove existing businesses from the register on grounds including national security, public order, public interest and the protection of state sovereignty.

The proposal, approved by the Council of Ministers on August 6, remains before the House commerce committee. It would allow authorities to withhold detailed justifications where disclosure could reveal sensitive information, while informing affected companies of the general grounds for decisions.

The bill follows parliamentary discussions about companies controlled by non-EU nationals, particularly those with Turkish ultimate beneficial owners, and possible implications for property ownership through foreign-controlled businesses. Further details are available in the proposed amendment and earlier parliamentary reporting.

Balancing Investment And Oversight

Cyprus is seeking to maintain an efficient company registration process while strengthening checks on ownership, sanctions compliance and potential security risks.

The two-to-four-day target supports the country’s appeal to entrepreneurs and international investors, but the actual timeline depends on the nature of the business, the documentation submitted and any additional regulatory or security reviews required.

eCredo
Aretilaw firm
The Future Forbes Realty Global Properties
Uol

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter