{{ languageVal }}
Industry Updates
Data Protection Changes and Preparing for the Impact on UK Securitisations
01 Mar 2018
As one of the leading global corporate and fiduciary service providers, and having acted on numerous UK securitisation transactions, Maples Fiduciary recognises the challenges that an evolving regulatory landscape has presented to this market. The General Data Protection Regulation ("GDPR"), introduced by the European Parliament, the Council of the European Union and the European Commission, comes into effect on 25 May 2018 and intends to strengthen and unify data protection for all individuals within the European Union ("EU"). Given the significant changes and impact on businesses this will have, we remain committed to partnering with our clients and legal advisers to ensure preparedness as the effective date approaches.
Today's increasingly data-driven world and rapidly evolving business and technology landscape has necessitated an update to the regulatory environment in the EU. Depending on the underlying assets of a securitisation, significant amounts of data may be received, processed and held by various transaction parties. While the current directive has helped harmonise data privacy laws, the incoming GDPR is a much more robust piece of legislation and will impact various participants in the UK securitisation market. Key points of the GDPR, among others, include:
- Increased territorial scope: The GDPR extends the jurisdiction of data privacy regulation to companies located in the EU as well as foreign companies that process the personal data of subjects residing in the EU.
- Consent: The request for consent must be given in an intelligible and easily accessible form with the purpose for data processing attached to that consent. Consent must be clear and distinguishable from other matters and companies must ensure the process for withdrawing consent is as easy as it is to give it.
- Data subject rights: The rights of individuals under the new legislation will increase significantly and include: mandatory breach notification; the right to request whether their personal data is being processed, where and for what purpose; the right to be forgotten, ensuring that data controllers erase personal data held on individuals in certain situations, cease further dissemination of data and have third parties halt processing of data; and the introduction of data portability whereby the individual can receive personal data concerning them and transit it to another controller.
While the main principles in the existing directive still hold true, the GDPR aims to update data protection standards to fit today's technology landscape. There is now more personal data being created and processed than ever before and the GDPR will provide the foundation to support protecting the rights of individuals now and through future waves of innovation.
The UK government has confirmed that despite its decision to leave the EU, this does not negate the commencement of the GDPR. As such, there will be a significant impact on systems and security and UK organisations must be ready in order to avoid penalties for non-compliance which can reach the higher of 4% of annual global turnover or 20 million.
While there may be questions that arise regarding how GDPR will apply to once the UK is no longer an EU member state and the impact this may have on issuers and legal title holders within the securitisation market, who are deemed the data controllers, this should not distract from the need to remain compliant in the short term, working with service providers and legal advisors to have the necessary agreements, systems and processes in place.
Maples Fiduciary brings unmatched experience and expertise, a personalised and responsive level of service and a collaborative approach in navigating the complexities of today's evolving business landscape.
To further discuss your corporate services needs or to learn more about our partnership-based approach, please contact
Sam Ellis,
Jennifer Jones or
Charles Leahy.
Related Services
Hedge Funds
Our hedge fund capability spans precision accounting services across strategies and asset classes, to sophisticated and transparent investor reporting, alongside the full range of middle office functions.
Institutional Investors
With many institutional investors requiring assistance in establishing the operational infrastructure needed to implement complex strategies and structures, we offer customised solutions that enable them to enhance their risk management and governance practices.
Private ASSETS
Expert guidance at every step of the launch process can overcome today's competitive challenges, with continued success driven by our global operating model and specialist investor-focused services.
Related Contacts
-
Sam Ellis
-
Charles Leahy
Related Articles
-
-
Industry Updates
Revisiting the ELTIF: 2023 Regulatory Updates to European Long-Term Investment Funds
10 Oct 2023
-
Industry Updates
ADGM and DIFC Private Credit Regimes: What Fund Managers Need to Know
04 Oct 2023
-
-
Analysis & Insights
Wrapped Pool Funds: Innovation and Value for Wealth Managers and Their Clients
21 Jun 2022
-
Industry Updates
SRA Platform Helps Pensions and Endowments Serve the Public Good
06 Jan 2022
-
Industry Updates
Robust Corporate Governance for Hong Kong's New Limited Partnership Fund Regime
07 Sep 2021
-
Analysis & Insights
Ireland's ILP: Operational Implications for Alternative Investment Managers
09 Jun 2021