Deloitte AsiaPacificFinancialServicesCENTREfor RegulatoryUpdateREGULATORY Q32022STRATEGY ASIAPACIFIC October2022 RegulatoryHotTopics-Topsixmosttalkedaboutthemesthisguarter Introduction FinancialProducts, Instruments&Services Systemic/CurrencySummary Stability Australia Approach 12 Updates 9 25Data&TechnologySupervisory8 ChinaMainland HongKongSAR India Updates Indonesia UpdatesTaxonomyJapan Updates 1.COVID-19MeasuresMalaysia Climate&Sustainability 2.Govermance&Strategic/Reputational RiskNewZealand 3.FinancialRisk Philippines 4.Operational&ConductRisk 6 5.FinancialCrimeSingapore FinancialRisk6.ConsumerProtection 7.Data&Technology 8.FinancialProducts,Instruments&Taiwan Services Updates 9.FinancialMarketInfrastructureThailand 10 SouthKorea Updates 10.Systemic/CurrencyStability 11.Enforcement Vietnam 12,SupervisoryApproachContacts 2022,Forinfomstion,ContactsDeloitbeToucheTohmatsuLimitec Australia(1/2) Introduction APRAandASICreleaseCorporatePlans On8August2022,APRApublisheditsupdatedCorporatePlanfor2022-23,Akeypriorityremainspreservingtheresilienceofbanks,insurersandsuperannuationfunds.Further, APRAconsultsonthedraftPrudentialStandard,CPS230Operational RiskManagement APRAisconsultingonanewdraftPrudentialStandard,CPS230OperationalRisk Summary Australia APRAwillmodernisetheprudentialarchitecture,strengthencyberresilience,respondtoStandardsonoutsourcing(CPS231)andbusinesscontinuitymanagement(CPS232), andpractices. acrossthebanking,insurance,andsuperannuationindustries.Theconsolidationand streamliningofrequirementsareintendedtobereflectiveofAPRA'sshifttowardsoutcomes-ChinaMainland itsCorporatePlanforthenextfouryears(2022-26).TheASICCorporatePlanfocuseson designanddistribution,sustainablefinance,retirementdecisionmaking,andtechnologyrisks,suchascyberriskanddigitallyenabledmisconduct.AS1Calsoconfirmedthatit continuestoconsiderlitigationasameansofenforcement,ifappropriate. financialinstitutions.ThefinalversionofCPS230isexpectedtobereleasedinearly2023,andtocomeintoforcefrom1January2024. HongKongSAR India APRACorporatePlan.(2022-23)Discussionpaper-Strengtheningoperationalriskmanagement(forPrudentialStandardCPS A51CCorporatePlan(2022-26)230_Operational_Risk_Management) APRAnotifyingregulatedentitiesaftermajordatabreachplanning Indonesia Japan On6September2022,APRAbeganconsultationsonPrudentialPracticeGuides,CPG190Malaysia Subsequenttoacyber-attackreportedbyamajorAustraliantelecommunicationentityonFinanciaiContingencyPlanningandCPG900ResolutionPlanning.Theguideswillprovide reviewandupliftcontrolsonhigh-riskprocessesandtransactionswherepossible.This clarityon,andassistregulatedentitiesinmeetingtherequirementsoftheequivalentprucentialstandardsthathavebeenproposed,i.e,CPS190FinancialContingencyPlanning NewZealand includesareasofdigitalcustomeronboarding,andsettingupfirst-timepayees.EntitiesandCPS900ResolutionPlanning.Thecorecbjectiveseftheguidanceandstandardswillbe shouldadditionallycommunicatetothelircustomersandralseawarenessonmeasuresthatminimisetheriskoffraud. toensurebetterpreparedness,andintheunlikelycaseoffailure,thecapacitytoachievePhilippines orderlyresolutionofsituatiorsthatmaylimittheviabilityofanentity.Thestandardsare APRAnews-Optusdatabreach:anupdateforAPRAregulatedentities expectedtocomeintoeffecton1January2024. Singapore Enhancementstostrategicplanningandmemberoutcomesin Submissionstotheconsultationarerequestedby6December2022. SouthKorea Superannuationcialcontingency_and resolutionplannin On1August2022,APRAproposedarangeofchangestothePrudentialStandard,SPS515Discussion_paperStrengtheningcrisispreparedness StrategicPlanningandMemberOutcomes,whichrequirestrusteestoevaluatetheir performanceindeliveringqualityoutcomestomembers,Thestandardaimstobetterensure Thailand financialprojections,ancensuringtimelyactienstakentoaddressunderperformance. Submlsslonstothediscusslonpaperarerequestedby11November2022. Vietnam Discussion_paper-Strategic.planning_and_memberoutcomes:Proposed_enhancements Contacts 2022,Forinfommstion,ContactsDeloitteToucheTohmstsuLUimitedsisPscificririancislServicesRegyUpdsteQ12022 Australia(2/2) Introduction APRAtomoderniseitsprudentialarchitectureNewremediationguidancereleased Summary On12September2022,APRAoutlineditsapproachtoachievingoneofitscorestrateg Followingatyarpublicconsultationprocess,ASIChaspublishednewremediation initiativesoutlinedintheirCorporatePlan-modernisingtheprudentialarchitecture.APRA'sguidance,RG277ConsumerRemedietion,toheipfinancialinstitutionsremediatetheircustomersquicklyandeffectively.TheguidereplacesRG256forallfutureremediations Australia theregulatoryframework*clearer,simplerandmoreadaptable,*throughaseriesofinitiatedonorafter27September2022,andappliestoAustralianfinancialservices initiativesfocusedon: •Betterregulationensuringstandardsandguidanceareeasytounderstand,easytoupninecoreprinciplesofremediationandrulesaboutproactivelyinitiatingremediations, navigate,andeasytoimplement:determiningremediationoutcomes,anddeliveringanappropriateoutcome,The9principles forconducting