REGULATORY Archives - Andria Papageorgiou

Procedures for the receipt of reports of infringement of Regulation (EU) No. 596/2014 on market abuse

We would like to draw your attention to the Circular C488 (the “Circular”) issued by the Cyprus Securities and Exchange Commission (the “CySEC” of the “Commission”) on the 17^th of February 2021, under the provisions of Article 2(1) of the Regulation (EU) No 596/2014 as amended (the “Market Abuse Regulation”), in relation to the updated procedures in force regarding the receipt of reports of infringement pursuant to the provisions of Article 32 of the Market Abuse Regulation.

In brief, please note the following:

A. Reporting Requirements:

The staff members of the Market Surveillance and Investigations Department of CySEC dedicated to the handling of the reports of infringements (the “Competent Department”) have been assigned with specific duties in order to assist and provide information on the procedures for reporting infringements to any interested person.
The report of infringement can be submitted either by name or anonymously, through the communication channels of the Competent Department as further specified under point A3 of the Circular.
A person who is accused of having committed an actual or potential infringement of the Market Abuse Regulation (the “Reporting Person”), may proceed with the submission of a written report of infringement by completing the “Whistleblowing External Disclosure Form” (the “Form”) which is available as an Appendix within the Circular.
In cases when the identity of the Reporting Person has been disclosed, CySEC may request further information.
Upon the submission of the infringement report, either orally or written, CySEC notifies the Reporting Person in writing within how many days will be notified about the results of his/her inquiry and ensures that the relevant notification will be sent within the timeframe set.

B. Record Keeping of the Infringement Reports:

Unless otherwise requested by the Reporting Person, a receipt of a confirmation is sent by CySEC.
In cases where reporting of infringements has been performed through the use of a telephone line, CySEC has the right to document the oral reporting, except the cases where Reporting Person’s prion consent is not provided.
In cases where Reporting Person’s consent is not provided for the reporting of infringements, CySEC has the right to document the conversation in the form of accurate minutes.
In cases where a person requests a physical meeting with the Competent Department for the purposes of reporting the infringement, CySEC ensures that complete and accurate records of the meeting are kept in a durable and retrievable form.
In cases where the confidentiality regime is used, CySEC notes that under certain circumstances as those explained in point C of the Circular, confidential information of the Reporting Person may be published.

To this end and as per Article 6(6) of the Market Abuse Law of 2016, a person providing information to CySEC, in accordance with the Market Abuse Regulation, is not considered to be infringing any restriction on disclosure of information imposed by contract or by any legislative, regulatory or administrative provision, nor will the said person have the liability of any kind related to such disclosure.

In case you have any questions, please do not hesitate to contact us for further professional assistance.

Disclaimer: The information contained in this article is provided for informational purposes only, and should not be construed as legal advice on any matter. Andria Papageorgiou Law Firm is not responsible for any actions (or lack thereof) taken as a result of relying on or in any way using information contained in this article and in no event shall be liable for any damages resulting from reliance on or use of this information.

COMPLIANCE, CYSEC, News, REGULATORYFebruary 22, 20220 comments

by Andria Papageorgiou

Supervisory briefing in relation to firms using tied agents in the MiFID II framework

A. INTRODUCTION

In accordance with the Regulation (EU) No 1095/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Securities and Markets Authority) amending Decision No 716/2009/EC and repealing Commission Decision 2009/77/EC as amended by Regulation (EU) 2019/2175, one of European Securities and Markets Authority (the “ESMA“)’s objectives is to actively foster supervisory convergence across the Union with the aim of establishing a common supervisory culture.

B. OVERVIEW AND SCOPE

Following the UK withdrawal from the EU, ESMA has been monitoring the behaviour of firms in order to understand whether their interaction with EU-based clients is done in a way that is compliant with the MiFIR and MiFID legislation (including the regimes providing the conditions for third-country firms to provide investment services and activities in the Union). In this context, some practices concerning investment firms using tied agents recently emerged as a potential source of circumvention of the abovementioned legal framework.

Furthermore, ESMA believes that these issues have more general relevance, and it is thereby important to identify the supervisory expectations on firms using tied agents in a convergent manner across the Union. Therefore, this supervisory briefing takes into account all cases where an EU firm uses tied agents; a specific focus is given to cases where tied agents are legal persons that are controlled or have close ties with other entities or third-country entities.

The purpose of the Briefing is to give indications and information on supervisory expectations of ESMA and National Competent Authorities (the “NCAs”) to market participants of compliant implementation of the MiFID II provisions relating to tied agents and aims at contributing to the development of a convergent supervisory culture across the European Union (the “EU”).

The Briefing has been designed to be used in the way that best fits with supervisory methodologies. It is noted that the Briefing covers the aspects mentioned under Points [B] and [C] below.

C. SUPERVISORY EXPECTATIONS WHEN FIRMS APPOINT TIED AGENTS

Before the appointment of a tied agent, it is expected that a firm:

Has a clear understanding of how the tied agent will contribute to the strategy of the firm, what types of clients the tied agent will be dealing with and how the firm will obtain and deal with these clients.
Assesses, inter alia, the following:

The tied agent is suitable to promote or provide activities on behalf of the firm, is of sufficiently good repute, and possesses the necessary knowledge and competence (e. tied agent should be included in the assessment of knowledge and competence of staff in accordance with the ESMA Guidelines);
The tied agent has the ability, capacity, sufficient resources, appropriate organisational structure to support the performance of activities on behalf of the firm, and that the firm has a good understanding and is satisfied that the tied agent is able to ensure compliance with MiFID II requirements (e. assess the organizational structure of tied agent, assess the existence of appropriate mechanisms that the tied agent will use to report to the firm, assess the good repute and suitability of the persons responsible for the management and internal control of the tied agent, etc.);
The tied agent (if a legal person) has anticipated the number of natural persons that will be involved in the provision of activities on behalf of the firm, the place from which those persons will provide services to the firm as well as how they will be monitored;
In the case where under the national legislation a tied agent is allowed to hold money and/or financial instruments of clients as per Article 29(2) of MiFID II, then it is expected that the firm will assess the financial situation and the arrangements performed in regards to safeguarding of clients’ funds;
The appointment of the tied agent does not prevent the firm from complying with the MiFID II legislative framework (e. verification that the organisational settings of tied agents do not prevent their effective supervision by firms).

Ensures that the tied agent clearly agrees with the respective rights and obligations. Thus instructions and termination rights shall be provided by firms through an agreement between the relevant parties. The aspects that the relevant agreement is expected to cover are available under Point [22] of the Briefing.
Avoids appointing a tied agent which is a legal person and whose employees involved in the provision of the activities on behalf of the firm (e.g. sales staff) are also at the disposal or under the control of other entities (including third-country entities) as such entities could exercise inappropriate influence over the way in which the tied agent carries out the activities on behalf of the firm or may prevent the firm from effectively monitoring the activities of their tied agent.

D. SUPERVISORY EXPECTATIONS ON FIRMS USING TIED AGENTS IN THEIR ONGOING ACTIVITIES

Pursuant to the provisions of Article 29(2) of MiFID II, firms are required to monitor the activities of their tied agents to ensure that they continue to comply with MiFID II when acting through tied agents. Thus, once a firm appoints a tied agent, it is expected to ensure the following:

It has in place adequate internal measures and processes to appropriately oversight the activity that the tied agent carries out on its behalf, such as the following:

The Compliance Function shall advise and assist the persons responsible to carry out investment services and activities to comply with the firm’s obligation under MiFID II.
With respect to risk management, a firm shall monitor, inter alia:
- the level of compliance by the firm’s relevant persons with the arrangements, processes and mechanisms adopted by the firm to manage the risks relating to the firm’s activities
- the adequacy and effectiveness of measures taken to address any deficiencies in the policies, procedures, arrangements and mechanisms adopted by the firm to manage the risks, including failures by the relevant persons to comply with such arrangements, processes and mechanisms
The remuneration policies and procedures are not incentivising relevant persons to favour their own interests to the potential detriment of any client.
The Conflict of Interest Policy shall include procedures and measures to ensure that relevant persons carry on their activities at an appropriate level of independence.

Adoption of appropriate and proportionate governance arrangements by firms to monitor the activities carried out by the tied agents, such as for example:

The appointment of one or more independent or non-executive directors in charge of monitoring the activities of the tied agents;
To carry out an independent (external) review of the internal control framework (and staff) in charge of monitoring the tied agents.

Consequently, in order to monitor the tied agent’s activity, NCAs should be satisfied that a firm has in place, inter alia, adequate:

Organisational arrangements in order to monitor the skills and experience of the tied agent;
Appropriate reporting mechanisms (e.g. firms to engage in face-to-face meeting/discussions with tied agents to avoid excessive reliance when it comes to high-level attestation from the tied agent, receipt of specific information from the tied agent on a regular basis);
Mechanisms to assess the quality of services provided by the tied agent, as well as the consistency of the tied agent with the relevant EU legislative framework;
Mechanisms for the identification of conflicts of interest, which may arise from the relationship between the appointed tied agent and other entities or third-country entities with which the tied agent has the close link.

Regular monitoring of the tied agents’ financial situation through experienced persons (e.g. financial accountants).
Dealing with the complaints concerning the activities of the appointed tied agents.
Has the ability to terminate the relationship with a tied agent, where necessary, with immediate effect (e.g. when this is in the interest of clients) without determinant the continuity and quality of the provision of activities to clients.
When the relationship between a firm and a tied agent is terminated:

Immediate notification of the NCA of the home Member State specifying if the said termination is due to matters having a serious regulatory impact or involving an offence or a breach of MiFID II requirements;
Notification of all relevant clients in order to avoid any future interaction with the tied agent; and
Completion and fulfilment of all outstanding activities and obligations to clients either by the firm itself or another tied agent.

In case you have any questions, please do not hesitate to contact us for further professional assistance.

Disclaimer: The information contained in this article is provided for informational purposes only, and should not be construed as legal advice on any matter. Andria Papageorgiou Law Firm is not responsible for any actions (or lack thereof) taken as a result of relying on or in any way using information contained in this article and in no event shall be liable for any damages resulting from reliance on or use of this information.

COMPLIANCE, REGULATORYFebruary 11, 20220 comments

by Andria Papageorgiou

Legal Opinions For Financial Institutions

Legal opinion is a piece of professional legal advice on a specific subject. Lawyers have an exclusive right to prepare such a document at the request of the person concerned. A correctly drafted opinion letter will ensure the benefit of your side to all parties to the dispute and confirm the transparency of the contract or the legality of certain legal actions.

Navigating through complex and uncertain legal provisions, Andria Papageorgiou Law Firm provides qualified third-party opinions on an array of subjects, with our expertise lying in financial services to assist you to come to the right conclusion whilst allowing you to have a clear understanding of the law.

We can assist with drafting legal opinions in Cyprus and over 100 other jurisdictions through our network of associates.

Regulators, payment service providers, and other methods of payment such as Visa and Mastercard are now requiring investment firms and other financial institutions to show that the provision of services in European or non-European countries, is permitted and in line with local country rules and regulations.

It is important to remember that in drawing up a Legal Opinion on any issue, Lawyers are responsible for their opinions, as they conduct legal and factual research, analysis, and verification and it is for this reason that providing Legal Opinions can be a rather expensive process at times.

Our global network of associates has been vetted to ensure that quality Opinions are prepared with investment issues distinguished by strict language, clarity of circumstances provided, and presence of transparent and understandable conclusions.

We have assisted investment firms and other financial institutions globally, including Cyprus, South Africa, Belize, New Zealand, Australia, Thailand, Malaysia, Taiwan, Singapore, and more, to attain Legal Opinions in over 100 countries.

Should you have any further questions, please do not hesitate to contact us at info@apapageorgiou.com.

COMPLIANCE, REGULATORYNovember 1, 20210 comments

by Andria Papageorgiou

CySEC New Directive for the Registration of Crypto Providers

The Cyprus Securities and Exchange Commission (CySEC) issued on Friday a directive about the registration and operating conditions of providers of services related to cryptocurrencies. According to the guidelines, published only in the Greek language, CySEC provides certain procedures to follow in order to comply with the recent transposition of AMLD5 measures taken in the European Union (EU) to combat Anti-Money Laundering and Counter-Terrorist Financing.

The registration fee for the providers who want to apply before CySEC for authorization under the said directive would be EUR 10,000, and the renewal fee shall be EUR 50,000. In terms of the board’s composition, there should be a minimum of four members: two executives and two non-executives. Furthermore, among the conditions set out in the said directive, the companies should comply with some requirements such as good reputation, appropriate policies, systems and procedures, relevant security policies, and remuneration requirements, as specified by the CySEC.

In addition to the said directive, it is expected that the CySEC will issue a policy statement very soon clarifying other relevant matters. Additionally, there is a CySEC application file available with the updated regulatory requirements to follow the AMLD5 rulings.

It is well admitted by CySEC, who shares the position of the European Securities and Markets Authority (ESMA), that some crypto assets, including the so-called virtual currencies, such as Bitcoin, are highly risky and speculative, and investors must be alert to the high risks of buying and/or holding these instruments, including the possibility of losing all their money. Crypto assets come in many forms but the majority of them remain unregulated in the EU including Cyprus.

In light of all the above, it is quite evident that the incorporation of crypto-asset businesses under the scope of the EU AML legislation under the amended 5th AML Law in Cyprus is a very significant step.

Should you have any further questions, please do not hesitate to contact us at info@apapageorgiou.com.

Disclaimer: The information contained in this article is provided for informational purposes only, and should not be construed as legal advice on any matter. Andria Papageorgiou Law Firm is not responsible for any actions (or lack thereof) taken as a result of relying on or in any way using information contained in this article and in no event shall be liable for any damages resulting from reliance on or use of this information.

COMPLIANCE, News, REGULATORYJune 29, 20210 comments

by Andria Papageorgiou

The Use of Electronic Signature

Undoubtedly and unsurprisingly, the COVID-19 pandemic has affected businesses and individuals in a variety of ways. One aspect, which has been discussed to a great extent, is the use of electronic signatures in Cyprus and the legal implications of their use.

The Regulation (EU) N 910/2014

In an aim to improve trust in EU-wide electronic transactions and to increase the effectiveness of public and private online services and e-commerce, Regulation (EU) N 910/2014 on electronic identification and trust services for electronic transactions in the internal market (the “eIDAS Regulation”) created a new system for secure electronic interactions across the EU between businesses, citizens and public authorities, setting out the conditions under which Member States recognize electronic identification means of natural and legal persons falling under a notified electronic identification scheme of another Member State, rules for trust services (for the verification of the identity of individuals and businesses online, as well as authenticity of documents) and establishing a legal framework for electronic signatures, seals, time stamps, documents, registered delivery services and certificate services for website authentication.

The Cyprus Law 55(I)/2018

The eIDAS Regulation has been incorporated into Cyprus law in 2018 through Law 55(I)/2018 (the “Law”).

The three types of electronic signatures

Three types of electronic signatures, each with different judicial value, are distinguished by the Regulation, as follows:
1. an “electronic signature” is defined by the Regulation as “data in electronic form which is attached to or logically associated with other data in electronic form and which is used by the signatory to sign”;
2. an “advanced electronic signature” is “an electronic signature which is uniquely linked to the signatory, is capable of identifying the signatory, is created by using electronic signature creation data that the signatory can, with a high level of confidence, use under their sole control and is linked to the data therewith in such a way that any subsequent change in the data is detectable”; and
3. a “qualified electronic signature”, which is an advanced electronic signature created by a qualified electronic signature creation device having the added comfort of being based on a qualified certificate for electronic signatures.

Admissibility and legal validity of electronic signatures

The Regulation specifies that an electronic signature cannot be denied legal effect or be deemed inadmissible as evidence in legal proceedings solely on the grounds that it is in an electronic form or that it does not meet the requirements for qualified electronic signatures. However, it grants the “qualified electronic signature” the most significant judicial value deeming that it shall be equivalent to a handwritten signature.

Obtaining a qualified electronic signature

The procedure of obtaining a qualified electronic signature under Cyprus law was announced in May, amidst the COVD-19 pandemic, by the Deputy Ministry of Research, Innovation and Digital Policy of Cyprus. The Cyprus Stock Exchange has been authorised as a Certification Service Provider to issue qualified certificates on electronic signatures, though the government has already signed a Memorandum of Understanding with commercial banks that will enable and promote electronic signatures in the banking sector.

The validity period of such qualified e-signatures is currently set at one year from the date of issuance of the qualified certificate.

The sole Qualified Trust Service Provider (QTSP) currently registered in Cyprus is JCC Payment Services Ltd and, there are just two other Greek Companies, registered in Europe, carrying out activities in Cyprus: Byte Computer ΑΕ and ADACOM S.A. However, with the passing of the new legislation it is likely that these companies will face competition.

Difficulties and complications

While electronic signatures and even advanced electronic signatures were occasionally used prior to the COVID-19 pandemic, an increase in their use was noticed under the current circumstances. Such increased use of digital signatures has highlighted certain issues with their applicability and implementation. One such problem arises with documents that require witnessing. Common law provisions, applicable in Cyprus, require the physical presence of witnesses in the same location as the signatory. Therefore, a witnessing and attestation requirement is only satisfied in the case of an electronically executed document where the witness is physically present in the same location as the signatory. While the witness can still attest the document via a digital signature from the same location as the signatory, “remote” witnessing (e.g. by video link) is not permitted.

However, it is worth mentioning that certain, if not all, local authorities and institutions are still reluctant in accepting the digital signatures. In addition, it is evident that there are still no judicial decisions in relation to the use and implementation of electronic signatures, in order to see how the Cypriot courts would interpret and apply the relevant regulatory and legal provisions.

Last but not least is the fact that heavy dependence on electronic means will bring a higher demand for cyber security which may include a requirement for the use of electronic passports. Steps such as the creation of an electronic passport are likely to meet with resistance from some sectors of society, since, whilst they are superficially equivalent to a biometric identity card, they include continuously updated real data about an individual.

Should you have any further questions, please do not hesitate to contact us at info@apapageorgiou.com.

News, REGULATORYJune 28, 20210 comments

by Andria Papageorgiou

ESMA Guidelines (ESMA35-36-1952) on certain aspects of the MiFID II compliance function requirements

The European Securities and Markets Authority (ESMA) has published the Guidelines on certain aspects of the MiFID II compliance function requirements (‘the Guidelines’), on 6 April 2021 translated in all official languages of the EU. These Guidelines, replace the previous ESMA guidelines on the same topic issued in 2012.

The Guidelines apply in relation to the requirement of the Regulated Entities who, as part of their obligations under the Investment Services and Activities and Regulated Markets Law of 2017 (‘the Law’), must ensure that the compliance function fulfils the requirements set out in Article 22 of MiFID II Delegated Regulation 565/2017 by maintaining an efficient compliance function in accordance with Article 17(2) of the Law.

The Guidelines’ objective is the establishment of consistent, efficient and effective supervisory practices and to ensure the common, uniform and consistent application of certain aspects of the MiFID II compliance function.

Therefore, these Guidelines aim at requiring the Regulated Entities to have a robust governance framework by implementing systems and controls, policies and procedures, establishing an independent and effective compliance function to manage risks and ensure compliance with their regulatory obligations.

In brief, the said Guidelines focus on the below areas:

Guideline on the compliance risk assessment;
Guideline on the monitoring obligations of the compliance function;
Guideline on the reporting obligations of the compliance function;
Guideline on the advisory and assistance obligations of the compliance function;
Guideline on the effectiveness of the compliance function;
Guideline on the skills, knowledge, expertise and authority of the compliance function;
Guideline on the permanence of the compliance function;
Guideline on the Independence of the compliance function;
Guideline regarding the proportionality with regard to the effectiveness of the compliance function;
Guidelines on combining the compliance function with other internal control functions;
Guidelines on outsourcing of the compliance function;
Guidelines on the review of the compliance function by competent authorities;

The Guidelines apply from two months of the date of publication of the guidelines on ESMA’s website in all EU official languages, i.e. 07 June 2021.

CySEC adopts these Guidelines by incorporating them into its supervisory practices and regulatory approach.

Regulated Entities must take the necessary actions in order to ensure their compliance with the Guidelines.

Should you have any further questions, please do not hesitate to contact us at info@apapageorgiou.com.

COMPLIANCE, News, REGULATORYJune 2, 20210 comments

Cookie	Duration	Description
cookielawinfo-checbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.