SELF ASSESSMENT OF SEPA COMPLIANCE November, 2013

Similar documents
EACHA Instant Payments Interoperability Framework

EACHA Instant Payments Interoperability Framework

TARGET Instant Payment Settlement User Requirements

TECHNICAL SPECIFICATIONS FOR THE PROCESSING OF SEPA CREDIT TRANSFER ORDERS AND SEPA PAYMENT RETURN ORDERS

Application of Key UCC 4A Concepts and Terms to the Real-Time Payment System

SEPA CREDIT TRANSFER SCHEME IMPLEMENTATION GUIDELINES

Swedish Common Interpretation of ISO Payment Messages Readers Guide

Data Processing Agreement

Terms and Conditions for Remote Data Transmission

SWIFT gpi How payment market infrastructures can support gpi payments

SEPA Credit Transfer Customer-to-Bank Implementation Guidelines for the Netherlands

Version 3.0 valid from 20 November Notes on the English translation

SR 2018 Business Highlights

SEPA goes Mobile Dr. Marijke De Soete ETSI Security Workshop January 2011 Sophia Antipolis, France

The Bank of Russia Standard FINANCIAL MESSAGES IN THE NPS

(Non-legislative acts) REGULATIONS

CHAPTER 13 ELECTRONIC COMMERCE

Single Shared Platform. User Detailed Functional Specifications - Optional Services - 2nd book Version May 2013

TARGET Instant Payment Settlement

SIX Trade Repository AG

EPC e-mandates e-operating Model. Detailed Specification

TARGET Instant Payment Settlement

SEPA DIRECT DEBIT SCHEME IMPLEMENTATION GUIDELINES

Terms of Reference for the EIF Trust Fund Manager (TFM)

Annex 2 to the Agreement on Cooperation in the Area of Trade Finance & Cash Management Terms and Conditions for Remote Data Transmission

9 January February [Please provide your input]

E-invoice. Service Description

ACH: Now and Next. Andrée E. Ortega, AAP, CTP VP, ACH Product Manager, Wells Fargo. April 19 & 20, 2018

CSDs and Securities Market Infrastructures

BUSINESS JUSTIFICATION. Name of the request: Securities Transaction Regulatory Reporting

REGISTRAR AGREEMENT. Domain Name means a domain name allocated under the.eu Top Level Domain and its variants in other scripts.

Safaricom Data Privacy Statement

Single Shared Platform User Detailed Functional Specifications - Optional Services - 2nd book

Structured ordering and beneficiary customer data in payments

SEPA Credit Transfer Conversion Service:

Strong Customer Authentication and common and secure communication under PSD2. PSD2 in a nutshell

Single Shared Platform User Detailed Functional Specifications - Optional Services - 2nd Book

IOAS Operating Manual information and requirements specific to assessment against ISO/IEC 17065

Standards Readiness Criteria. Tier 2

ARTICLE 29 DATA PROTECTION WORKING PARTY

DECISION OF THE EUROPEAN CENTRAL BANK

MPL Service Requirements

REGULATORY FRAMEWORK FOR THE ACTIVITY OF MOBILE VIRTUAL NETWORK OPERATORS (MVNO)

SWIFT Certified Applications. Trade Finance. Technical validation Guide Version 1.3

ASSESSMENT SUMMARY XHTML 1.1 (W3C) Date: 27/03/ / 6 Doc.Version: 0.90

Internet copy. EasyGo security policy. Annex 1.3 to Joint Venture Agreement Toll Service Provider Agreement

TERMS AND CONDITIONS OF USE

Insight Session: T2S User Testing and Migration

The potential of SEPA Credit Transfer implementation in Croatia

Updated High-Level Information

TARGET Instant Payment Settlement

Compiling Data on International Mobile Money Transfer Services

IT Governance ISO/IEC 27001:2013 ISMS Implementation. Service description. Protect Comply Thrive

TARGET Instant Payment Settlement

This report was prepared by the Information Commissioner s Office, United Kingdom (hereafter UK ICO ).

Kingdom of Saudi Arabia. Licensing of Data Telecommunications Services

USER GUIDE FOR INTERNET BANKING OF PPF banka a.s.

HCT INST SCHEME RULEBOOK V2.0

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Privacy Policy: Data & Information Security Policy Last revised: 9 May 2018

BOARD OF THE BANK OF LITHUANIA. RESOLUTION No 46 ON THE REGULATIONS ON KEEPING THE PUBLIC REGISTER OF PAYMENT INSTITUTIONS. of 24 December 2009

You are signing up to use the Middlesex Savings Bank Person to Person Service powered by Acculynk that allows you to send funds to another person.

OIML-CS PD-05 Edition 2

ASSURING DATA INTEROPERABILITY THROUGH THE USE OF FORMAL MODELS OF VISA PAYMENT MESSAGES (Category: Practice-Oriented Paper)

Cybersecurity Policy in the EU: Security Directive - Security for the data in the cloud

Bankout. Seamless transactions across countries TREASURY SERVICES

GLOBAL MANAGEMENT CERTIFICATION SERVICES PRIVATE LIMITED PROCEDURE

As used in these Rules and unless the context otherwise requires: CMIC shall refer to the Capital Markets Integrity Corporation.

Privacy Policy. Implemented on: November 2, 2017

International Accreditation Forum, Inc. APPLICATION FOR MEMBERSHIP IN IAF

HF Markets SA (Pty) Ltd Protection of Personal Information Policy

CANADIAN PAYMENTS ASSOCIATION ASSOCIATION CANADIENNE DES PAIEMENTS STANDARD 005 STANDARDS FOR THE EXCHANGE OF FINANCIAL DATA ON AFT FILES

SR 2019 Business Highlights

Business terms and conditions

RTGS Application. SWIFT Certified Application. Label Criteria 2018

The Client is responsible for regularly updating its registered details.

GDPR AMC SAAS AND HOSTED MODULES. UK version. AMC Consult A/S June 26, 2018 Version 1.10

OUTCOME OF THE 8 TH MEETING OF TARGET INSTANT PAYMENT SETTLEMENT (TIPS) CONTACT GROUP

CITYTOUCH PRIVACY POLICY

Joint Initiative on a PSD2 Compliant XS2A Interface NextGenPSD2 XS2A Framework Operational Rules

International Securities Association For Institutional Trade Communication

SWIFT Certified Applications. Trade Finance. Technical validation Guide Version 1.1

POMONA EUROPE ADVISORS LIMITED

It applies to personal information for individuals that are external to us such as donors, clients and suppliers (you, your).

CALIFORNIA INDEPENDENT SYSTEM OPERATOR CORPORATION FERC ELECTRIC TARIFF FIRST REPLACEMENT VOLUME NO. II Original Sheet No. 727 METERING PROTOCOL

PRESENTATION OVERVIEW

DATA PROTECTION POLICY THE HOLST GROUP

CALIFORNIA INDEPENDENT SYSTEM OPERATOR CORPORATION FERC ELECTRIC TARIFF FIRST REPLACEMENT VOLUME NO. II Original Sheet No. 727 METERING PROTOCOL

TELECOMMUNICATIONS AND DATA CABLING BUSINESSES

Proposal for a model to address the General Data Protection Regulation (GDPR)

Data Processing Agreement

BL Real Time Server. The EBICS server system for SEPA Instant Credit Transfer. SEPA transfers in real-time

2018 CANADIAN ELECTRICAL CODE UPDATE TRAINING PROVIDER PROGRAM Guidelines

Draft Applicant Guidebook, v3

ISO/IEC INTERNATIONAL STANDARD

CALIFORNIA INDEPENDENT SYSTEM OPERATOR CORPORATION FERC ELECTRIC TARIFF ORIGINAL VOLUME NO. III Original Sheet No. 977 METERING PROTOCOL

NIS Standardisation ENISA view

I. PROPOSED DEFINITION OF PRIMARY PURPOSE IS INCONSISTENT WITH THE STATUTORY LANGUAGE OF THE CAN-SPAM ACT

June 30, Phyllis Schneider, AAP, Director, Network Rules ᅳ Rules Development & Technical Support

Consolidation Team INSPIRE Annex I data specifications testing Call for Participation

Transcription:

SELF ASSESSMENT OF SEPA COMPLIANCE November, 2013 Bucharest, November 2013

This document constitutes the self-assessment of TRANSFOND`s system SENT against the Eurosystem s SEPA-compliance criteria. The Eurosystem has defined four criteria which payments infrastructures should meet, to be considered SEPA-compliant. These criteria were published in the Eurosystem s 5 th Progress Report on SEPA and further clarified in the Eurosystem s subsequent document Terms of Reference for the SEPA-compliance of infrastructures ( ToR ). Criterion 1 Processing capabilities To promote infrastructures' SEPA compliance, they are asked to fulfill the requirements of the PEACH/CSM Framework, the SCT Rulebook and/or the SDD Rulebook(s), the Implementation Guidelines and the associated UNIFI (ISO 20022) XML standards, as well as to be ready to support scheme testing as planned by EPC. 1. Have you sent a Disclosure Letter to the EPC regarding your intention to become a SEPA scheme compliant CSM? Yes; it was sent on September 21 st, 2011 2. Are you compliant with the relevant PEACH/CSM Framework? Yes; SENT is compliant with the relevant PEACH/CSM Framework. 3. Are you compliant with the relevant SCT Rulebook? The SENT system is compliant with the SCT Rulebook Version 6.1. 4. Are you compliant with the relevant SDD Rulebook(s), i.e. core service and, if and when adopted, Business-to-Business service and e-mandate service? No; the SDD Rulebook is planned to be implemented in the near future. 5. Are you complying with the relevant guidelines that require the use of the UNIFI (ISO 20022) XML message standard? Yes the SENT system is fully compliant with ISO 20022 2

6. Are you able to deliver all mandatory payment information (from the so-called yellow data fields) in full and without alteration between the involved scheme participants? a. Please provide information on your ability to process the full SEPA-subset of the ISO 20022 XML messages (i.e. the yellow and white data fields). Yes; SENT is able to deliver all mandatory payment information (both yellow and white data fields) to the involved scheme participants 7. If you provide conversion services between XML and legacy formats (and/or v.v.), do you ensure that no payment data is lost? For euro payments, SENT does not provide conversion services between XML and legacy formats 8. Have you adequately tested your processing procedures? a. Please describe the framework, the organisation, the scope (national or cross-border) and the reach (CSM-bank, bank-csm-bank, end-to-end) of the testing. TRANSFOND has developed an exhaustive test set, that covers Bank-CSM-Bank field. Coordinated tests have been conducted with all participating banks, covering both domestic and cross-border payments. Criterion 2 Interoperability To promote the SEPA compliance of infrastructures, they are asked to adopt interoperability rules, i.e. interface specifications and business procedures for the exchange of SEPA credit transfers and SEPA direct debit payment orders between banks and infrastructures, and between infrastructures, that are preferably mutually agreed upon by the relevant CSMs, and undertake to establish a link with any other infrastructure upon request, based on the principle that the cost for establishing the link is borne by the requesting infrastructure. 9. Have you adopted interoperability rules, i.e. interface specifications and business procedures for the exchange of SEPA credit transfers and SEPA direct debit payment orders between banks and infrastructures, and between infrastructures? SENT has adopted interoperability rules for SEPA credit transfers. SEPA direct debit is not yet implemented. 3

a. If yes, are the interoperability rules you are using mutually agreed upon by the relevant CSMs?; TRANSFOND has implemented the interoperability rules estblished by the EACHA framework b. please describe, especially where you are not using mutually agreed interoperability rules, the relevant elements for interoperability (message formats, cut-off times, clearing and settlement procedures, reconciliation and control procedures); Not applicable. 10. Would you undertake to establish a link with any other infrastructure upon request? Yes. a. Have one or several links been established? If yes, please provide the names of the participating infrastructures; Yes; Equens b. a link would ideally be created on the basis of a mutually beneficial business case. In absence of such a business case, the requesting infrastructure provider would have to bear the costs of the requested link (setting up and maintenance thereof). Who bears the costs of the established link(s)?; Each party bears its own costs c. have you considered, either on your own initiative or upon request, changing the internal processing procedures in order to increase the efficiency of a link? Have any such changes been carried out?; No, such changes were not deemed necessary. d. how are the transfers between CSMs settled? Settlement of both domestic and cross-border transactions takes place on the TARGET2 platform. SENT system is a TARGET2 Ancillary System and uses procedure no. 5 Simultaneous multilateral settlement. Transfer of funds for EQUENS settlement is carried out through TARGET2 PM account of TRANSFOND. 4

Criterion 3 Reachability To promote the SEPA compliance of infrastructures, infrastructures are asked to be able to send or receive euro payments to and from all banks in the euro area, either directly or indirectly through intermediary banks, or through links between infrastructures (in other words, to provide full reachability) 11. Are you able to send euro payments from your participants and receive euro payments for your participants, to and from all SEPA scheme participating banks in the euro area, either directly or indirectly through intermediary banks, or through links between infrastructures? TRANSFOND is in process of establishing links with other infrastructures, under the EACHA Framework, in order to achieve full SEPA reachability for its participants. a. Please describe how many SEPA scheme participating banks you can reach (directly or indirectly) on the basis of contractual arrangements; SENT is able to reach banks that are connected to Equens system. b. how do you ensure that you are able to route a payment to each bank in the euro area that is participating in the SEPA scheme(s)?; Not applicable. Only a limited number of banks can be reached. c. please describe how you obtain the necessary routing information. If you use your own routing database, how do you update it, i.e. how do you obtain the latest information from all SEPA scheme participating banks in the euro area? How do you address possibly conflicting information if a SEPA scheme participating bank is reachable via several payment channels? How is routing decided where there are several possibilities for reaching a SEPA scheme participating bank?; SENT has its own routing database which provides the necessary routing information. The database contains routing data gathered periodically from SENT participants as well as from Equens. SENT distributes daily the routing table to all direct participants. Any routing data collision is avoided since currently there is only one link established (a bank can be addressed either directly or via Equens). 5

d. how much time (in days) do you need to reach every SEPA scheme participating bank, respectively be reached by every bank in the euro area that is participating in the SEPA scheme(s)? Will you be able to reach every SEPA scheme participating bank within one business day at the latest by 2012?; The SENT system is able to reach/be reached by all reachable banks within one day, at domestic level and at cross-border level (via Equens). e. if you currently do not offer full reachability to your participants, do you intend to offer it at a later point in time? If so, how will you achieve this and by when? Yes; TRANSFOND intends to conclude interoperability links with other CSMs. Criterion 4 Choice for SEPA scheme participants To promote the SEPA compliance of infrastructures, infrastructures are asked to enable financial institutions to make infrastructure choices based on service and price, and therefore not to apply undue access restrictions, nor to set obligations for users to process certain types of payment in a specific infrastructure, or via specific proprietary standards, nor to impose participation obligations on users of other infrastructures, and to ensure full transparency of services and pricing. 12. Have you made your retail payments clearing service offerings and your fee structure including information (and amounts) about all types of applicable fees, such as admission fees, periodical fees, transaction fees or package fees) publicly available? Yes; our services and fee structure are publicly available. 13. Do you refrain from applying different access conditions depending on the type of applicant, its location or other kind of considerations? Yes; we do not apply different access conditions depending on the type of applicant, its location or other kind of considerations. All participants should observe the same rules. 14. Do you refrain from obliging your participants to process certain SEPA payments in a specific infrastructure? Yes; our participants may choose which infrastructure they want to connect to. 6

15. Do you refrain from obliging your participants to use specific proprietary standards for SEPA payments? Yes; TRANSFOND has implemented the SEPA Standards rules and regulations. a. If no, please describe the proprietary standards for SEPA payments that you oblige your participants to use. Not applicable 16. Do you refrain from imposing participation obligations on the users of other infrastructures when another CSM is requesting a link? Yes. TRANSFOND does not impose such obligations to participants of other infrastructures. 7