Ordinance No. 71 on the requirements for the governance system of insurers and reinsurers, adopted by the FSC on 22.07.2021, was promulgated in SG 64 / 2021 and is effective. In accordance with the delegations provided for in it for issuing guidelines on its implementation, at its meeting on 09.09.2021 the FSC adopted the following instructions:
Instructions regarding the application of Art. 75, para. 1 of Ordinance No. 71 in connection with the observance of the Guidelines for Outsourcing to Cloud Service Providers issued by the European Insurance and Occupational Pensions Authority (EIOPA-BoS-20-002);
Instructions regarding the application of Art. 102, para. 1 of Ordinance No. 71 in connection with the observance of the Guidelines on Information and Communication Technology Security and Governance issued by the European Insurance and Occupational Pensions Authority (EIOPA-BoS-20/600).
These guidelines were adopted by the FSC in response to the intensifying process of digitalization in insurance. Through them, the FSC aims to facilitate the application of the specific requirements for the award of activities to could service providers (services provided through data processing in the so-called. “Cloud space”), which are a source of new risks for insurers and reinsurers and require a higher standard of information security in their activities. With these guidelines the FSC aims to establish additional guarantees to ensure compliance with the confidentiality, integrity and availability of information and information systems, with a view to limit the operational risk to which insurers and reinsurers are additionally exposed as a result of the use of high technologies for storage, processing and access to data.
The adoption of these guidelines completes the national legal framework for the governance system of insurers and reinsurers in accordance with the Insurance Code and the guidelines of the European Insurance and Occupational Pensions Authority. In this manner conditions are created for better management of the new risks faced by insurers and reinsurers, and the guarantees for protection of the interests of the users of insurance services in the environment of a digitized insurance market in the Republic of Bulgaria are strengthened.