The Central Bank published Resolution BCB No. 85 on April 8, 2021, regulating the cybersecurity policy and the requirements for contracting data processing and storage and cloud computing services.
The new regulation brought few changes in relation to Circular No. 3,909, of 08/16/2018, which governed the matter and will be revoked, in practice, by the new rule.
In summary, there were changes regarding (i) the continuity of payment services provided by Payment Institutions, which now have the obligation to establish and document the criteria that configure the crisis situation, regarding registration, analysis of the cause and impact, as well as (ii) the control of the effects of relevant incidents for their activities, for the due communication to the Central Bank of the occurrences of relevant incidents and interruptions of relevant services, and the measures for the resumption of activities.
The Resolution shall enter into force on 08/01/2021.
For further information, the Payment team is at your disposal.
