BaFin - Navigation & Service

Stand:updated on 01.12.2016 | Topic Governance Governance - Outsourcing

All undertakings are allowed to outsource functions or insurance activities. In the event of outsourcing, undertakings must ensure compliance with all supervisory rules and requirements. To this end, the undertakings must adopt a written policy for the outsourced functions and insurance activities.

If an undertaking also intends to outsource key tasks – e.g. one of the four key functions – it must designate an "outsourcing officer" responsible for supervising the outsourcing process. However, the ultimate responsibility of the management board (or other persons appointed to represent the undertaking) for the outsourced function or insurance activity cannot be delegated but always remains within the undertaking.

Other requirements are specified in the following – non-exhaustive – list of legal bases and interpretative decisions.

Legal bases

Insurance Supervision Act

  • Section 23 (3);
  • Section 32;
  • Section 47 nos. 8 and 9.

Delegated Regulation (EU) 2015/35

  • Article 258(2);
  • Article 274.

Guidelines on System of Governance (EIOPA-BoS-14/253 EN)

  • Guidelines 14 and 60 to 64.

Notification requirement in case of intended outsourcing of important functions or insurance activities

This publication should be read in the context of BaFin's publication "Rundschreiben 11/2023 (VA) - Fachliche Eignung und Zuverlässigkeit von Personen, die für Schlüsselfunktionen verantwortlich oder für Schlüsselfunktionen tätig sind, gemäß VAG".

I. Notification requirement

In accordance with section 47 no. 8 of the VAG, the intention to outsource important functions or insurance activities has been subject to immediate notification including submission of the respective draft agreement since 1 January 2016. Section 47 no. 8 of the VAG requires undertakings that had intended to outsource important functions or insurance activities before 1 January 2016 but failed to carry out their intention by 1 January 2016 to make appropriate notification, which includes submission of the draft agreement, without delay.
The term "important" is defined as follows: key tasks are always considered important.
Taking into account the numerus clausus provision of section 5 (3) no. 4 of the VAG (old version), BaFin generally also considers the following areas important:

  • sales,
  • portfolio management,
  • claims administration,
  • accounting,
  • asset investment and management.

II. Scope

The notification requirement applies to all domestic insurance undertakings and Pensionsfonds and to all insurance groups consisting exclusively of domestic primary insurers and reinsurers, as well as to groups with primary insurers and reinsurers domiciled in other member states or EEA signatory states pursuant to section 7 no. 22 of the VAG that are subject to supervision by BaFin as the competent authority for group-wide supervision according to the criteria set forth in section 279 (2) of the VAG. German branches of third country insurance undertakings are also subject to notification requirements.

III. General guidance on notification requirements

In order to be able to clearly allocate the notification and the necessary documentation, the four-digit BaFin registration number assigned to the undertaking must be indicated as reference.
The notification and all documents submitted with it must be in German. Where documents are not issued in German, a certified translation or a translation prepared by a publicly appointed or sworn interpreter or translator will be required in addition to the original version. The relevant BaFin division may waive the translation of English-language documents on a case-by-case basis.
The notification letter must be signed by at least one of the representatives of the undertaking and state the position held by them.

IV. Information and documentation required

The notification must contain:

  • he name of the service provider,
  • its address,
  • a description of the scope of the outsourced activities,
  • the reasons for outsourcing,
  • if key tasks are outsourced, in particular one of the statutory four key functions, the name of the competent person at the service provider.

Submission of the draft agreement is required.

If key tasks are outsourced, it is not necessary to include documents concerning the competent person at the service provider (for example CV or certificate of criminal record) together with the notification.

V. Outsourcing arrangements that existed prior to 1 JAnuary 2016

BaFin expects undertakings that outsourced important functions or insurance activities prior to 1 January 2016 to submit an overview of all existing outsourcing arrangements for such functions or activities. In this context, the explanations stated under points I to III above should be taken into account. Since this is not a formal notification stipulated under section 47 no. 8 of the VAG, the requirement that it should be made without delay does not apply.

  • The overview should include:
  • the name of the service provider,
  • its address,
  • a description of the scope of the outsourced activities,
  • the reasons for outsourcing,
  • the date the agreement was entered into,
  • if key tasks are outsourced, in particular one of the statutory four key functions, the name of the competent person at the service provider,
  • any subdelegations.

Submission of the outsourcing agreement is not required. BaFin reserves the right to request submission on a case-by-case basis.

Additional information

Did you find this article helpful?

We appreciate your feedback

Your feedback helps us to continuously improve the website and to keep it up to date. If you have any questions and would like us to contact you, please use our contact form. Please send any disclosures about actual or suspected violations of supervisory provisions to our contact point for whistleblowers.

We appreciate your feedback

* Mandatory field

Publications on this topic

Prod­uct Gov­er­nance

The responsible handling of financial products in manufacturing and distribution is designed to protect clients.

BaFin pub­lish­es Cir­cu­lar on Min­i­mum Re­quire­ments on the Sys­tem of Gov­er­nance of In­sur­ance Un­der­tak­ings

The circular on Minimum Requirements under Supervisory Law on the System of Governance of Insurance Undertakings (Aufsichtsrechtliche Mindestanforderungen an die Geschäftsorganisation von Versicherungsunternehmen – MaGo) is now available in English.

Au­tho­ri­sa­tion pro­ce­dure: BaFin pub­lish­es guid­ance no­tice on bank­ing busi­ness

What are the requirements that credit institutions have to meet if they wish to apply for authorisation to conduct banking business pursuant to sections 32 and 33 of the German Banking Act (Kreditwesengesetz – KWG) in conjunction with section 14 of the German Reports Regulation (Anzeigenverordnung – AnzV)? To answer this question, BaFin has now published a guidance notice, in particular in view of …

Attachments

Cir­cu­lar 02/2017 (VA) - Min­i­mum Re­quire­ments un­der Su­per­vi­so­ry Law on the Sys­tem of Gov­er­nance of In­sur­ance Un­der­tak­ings

Aufsichtsrechtliche Mindestanforderungen an die Geschäftsorganisation von Versicherungsunternehmen – MaGo

Risk cul­ture: Re­quire­ments of re­spon­si­ble cor­po­rate gov­er­nance

The development and promotion of an appropriate risk culture is a primary task of the management of any company.

All documents