2018年-EBA欧洲银行管理局_Report_on_prudential_risks_and_opportunities_arising_for_institutions_from_FinTech_56页_805kb

EBA Report Summary: Prudential Risks and Opportunities from FinTech

Core Content

This report by the European Banking Authority (EBA) explores the prudential risks and opportunities that financial institutions may face due to the adoption of FinTech technologies. It aims to raise awareness among supervisors and institutions about current and potential FinTech applications, without making recommendations, and focuses on microprudential aspects. The report is structured around seven use cases, each highlighting a specific FinTech application and its implications for financial institutions.

Main Viewpoints

• FinTech's Impact on Risk Profiles: The rapid evolution of FinTech can change the risk profiles of financial institutions by introducing new risks or amplifying existing ones.
• ICT Risks and Opportunities: While ICT risks are often seen as the primary concern, the report emphasizes the broader prudential risks and opportunities that arise from innovative technologies.
• Technology Implementation: The impact of FinTech on prudential risk is highly dependent on the type of technology, its implementation, and the associated processes and business models.
• Technological Neutrality: The EBA supports a neutral regulatory approach, ensuring that supervisory practices do not favor or discourage specific technologies.

Key Information

1. Use Case 1: Biometric Authentication Using Fingerprint Recognition

• Introduction: Biometric authentication is becoming increasingly popular in financial services due to its convenience and security.
• Current Landscape: Fingerprint recognition is widely used for customer authentication in mobile banking, offering a faster and more secure alternative to traditional passwords.
• Underlying Technologies: Biometric authentication relies on measuring physiological or behavioral traits and matching them with authorized samples.
• Risks and Opportunities:
  • Opportunities: Improved customer experience, reduced password fatigue, and enhanced security.
  • Risks: Increased third-party risk due to reliance on mobile device manufacturers, potential data integrity issues, and concerns about privacy and security.

2. Use Case 2: Robo-Advisors for Investment Advice

• Introduction: Robo-advisors provide automated investment advice, offering a low-cost and accessible solution for retail investors.
• Current Landscape: These services are becoming more common, especially in the context of online platforms and digital advice.
• Underlying Technologies: Machine learning and big data analytics are used to analyze customer profiles and provide tailored investment recommendations.
• Risks and Opportunities:
  • Opportunities: Increased accessibility to financial products, cost efficiency, and faster service delivery.
  • Risks: Legal and compliance uncertainties, conduct risk, reputation risk, and potential for financial exclusion due to biased data usage.

3. Use Case 3: Big Data and Machine Learning for Credit Scoring

• Introduction: Machine learning is being used to enhance credit risk management by analyzing extensive data sources.
• Current Landscape: Institutions use transaction data, social media data, and other sources to improve credit decision-making.
• Underlying Technologies: Big data analytics and machine learning models provide deeper insights and real-time credit assessments.
• Risks and Opportunities:
  • Opportunities: Better customer engagement, improved credit portfolio quality, and real-time risk insights.
  • Risks: Legal and conduct risks due to potential misuse of customer data, increased ICT security and change risks, and challenges in data governance.

4. Use Case 4: DLT and Smart Contracts for Trade Finance

• Introduction: Distributed Ledger Technology (DLT) and smart contracts are being explored to streamline trade finance processes.
• Current Landscape: Trade finance is traditionally labor-intensive and opaque, with many delays and errors.
• Underlying Technologies: DLT enables real-time, transparent, and secure transactions through smart contracts.
• Risks and Opportunities:
  • Opportunities: Reduced time and costs, increased transparency, and automation of trade processes.
  • Risks: Legal and compliance uncertainties, governance challenges, and potential third-party risks due to reliance on external providers.

5. Use Case 5: DLT for CDD Processes

• Introduction: DLT is being considered for Customer Due Diligence (CDD) to improve efficiency and data sharing.
• Current Landscape: CDD is a complex and costly process, often involving multiple institutions and jurisdictions.
• Underlying Technologies: DLT allows for a shared, real-time database of customer verification results.
• Risks and Opportunities:
  • Opportunities: Enhanced transparency, real-time CDD updates, and improved customer experience.
  • Risks: Data privacy concerns, legal liability issues, and challenges in standardizing CDD across jurisdictions.

6. Use Case 6: Mobile Wallet with NFC

• Introduction: Mobile wallets using Near Field Communication (NFC) are becoming a common payment method.
• Current Landscape: These wallets enable contactless payments and are increasingly used for e-commerce and POS transactions.
• Underlying Technologies: NFC technology allows secure, short-range communication between devices and payment terminals.
• Risks and Opportunities:
  • Opportunities: Improved customer experience, convenience, and security.
  • Risks: Third-party access risks, data protection concerns, and potential ICT availability issues due to technical failures.

7. Use Case 7: Outsourcing Core Banking/Payment Systems to the Public Cloud

• Introduction: Institutions are increasingly interested in migrating core systems to the public cloud.
• Current Landscape: Cloud services offer scalability, flexibility, and cost efficiency.
• Underlying Technologies: Cloud infrastructure and multi-tenant environments support automated and large-scale service delivery.
• Risks and Opportunities:
  • Opportunities: Cost reduction, scalability, and operational flexibility.
  • Risks: Increased ICT change and outsourcing risks, data security and jurisdictional concerns, and potential systemic risks from reliance on large cloud providers.

Conclusions

• Outcomes: The report highlights the transformative potential of FinTech in financial services and the need for institutions to review their risk management frameworks.
• Next Steps: The EBA will continue to monitor FinTech developments, provide guidance, and support regulatory consistency and coordination. The analysis is forward-looking and based on the current level of FinTech development, understanding, and knowledge.

Summary of Key Risks and Opportunities

The EBA emphasizes the importance of understanding the evolving landscape of FinTech and its implications for prudential risk management, while maintaining a neutral and open approach to technology.