Decisión (UE) 2021/1758 del Banco Central Europeo, de 21 de septiembre de 2021, por la que se modifica la Decisión BCE/2007/7 relativa a las condiciones de TARGET2-ECB (BCE/2021/43)

• Section: Serie L
• Issuing Organization: Banco Central Europeo

6.10.2021 ES Diario Oficial de la Unión Europea L 354/29

(1) El 20 de julio de 2021, el Consejo de Gobierno modificó (1) la Orientación BCE/2012/27 del Banco Central Europeo (2), con el fin de: a) aclarar que los titulares de cuentas dedicadas de efectivo de TIPS y los titulares de cuentas dedicadas de efectivo de T2S estarán conectados a TARGET2 a través del Portal Único de Infraestructuras de Mercado del Eurosistema a partir de noviembre de 2021 y junio de 2022, respectivamente; b) aclarar y ampliar las normas sobre el cumplimiento de los requisitos de seguridad de punto final de TARGET2, con el fin de garantizar que TARGET2 siga evolucionando para hacer frente a las amenazas a la ciberseguridad; c) imponer a los titulares de cuentas del módulo de pagos, sus participantes indirectos y los titulares de BIC accesibles que se hayan adherido al Esquema de transferencia SEPA inmediata mediante la firma del acuerdo de adhesión correspondiente deben ser y permanecer constantemente accesibles en la plataforma de TIPS a través de una cuenta dedicada de efectivo de TIPS, para garantizar que los pagos inmediatos estén disponibles en toda la Unión; d) establecer transparencia en las modalidades de transferencia de saldos de las cuentas de los participantes en TARGET2 a las correspondientes cuentas sucesoras del futuro sistema TARGET, a fin de garantizar la seguridad jurídica, y e) aclarar y actualizar otros aspectos concretos de la Orientación BCE/2012/27.

(2) Una vez operativo el proyecto de consolidación de T2-T2S, también será necesario garantizar la transparencia de las modalidades de transferencia de saldos de las cuentas de los participantes en TARGET2-ECB a las correspondientes cuentas sucesoras, a fin de garantizar la seguridad jurídica.

(3) Las modificaciones realizadas a la Orientación BCE/2012/27 que afecten a las condiciones de TARGET2-ECB deben reflejarse en la Decisión BCE/2007/7 del Banco Central Europeo (3).

(4) Debe modificarse en consecuencia la Decisión BCE/2007/7.

1) El artículo 1 se modifica como sigue: a) la definición de «orden de pago inmediato» se sustituye por el texto siguiente: «— “instant payment order” means, in line with the European Payments Council's SEPA Instant Credit Transfer (SCT Inst) scheme, a payment instruction which can be executed 24 hours a day any calendar day of the year, with immediate or close to immediate processing and notification to the payer and includes (a) the TIPS DCA to TIPS DCA instant payment orders, (b) TIPS DCA to TIPS AS technical account instant payment orders, (c) TIPS AS technical account to TIPS DCA instant payment orders and (d) TIPS AS technical account to TIPS AS technical account instant payment orders,»;

2. se añaden las definiciones siguientes: «— “European Payments Council's SEPA Instant Credit Transfer (SCT Inst) scheme” or “SCT Inst scheme” means an automated, open standards scheme providing a set of interbank rules to be complied with by SCT Inst participants, allowing payment services providers in SEPA to offer an automated, SEPA-wide euro instant credit transfer product,

   — “TIPS ancillary system technical account (TIPS AS technical account)” means an account held by an ancillary system or a CB on an ancillary system's behalf in the CB’s TARGET2 component system for use by the ancillary system for the purpose of settling instant payments in its own books,

   — “TIPS DCA to TIPS AS technical account liquidity transfer order” means the instruction to transfer a specified amount of funds from a TIPS DCA to a TIPS AS technical account to fund the TIPS DCA holder’s position (or the position of another participant of the ancillary system) in the books of the ancillary system,

   — “TIPS AS technical account to TIPS DCA liquidity transfer order” means the instruction to transfer a specified amount of funds from a TIPS AS technical account to a TIPS DCA to defund the TIPS DCA holder’s position (or the position of another participant of the ancillary system) in the books of the ancillary system,

   — “reachable party” means an entity which: (a) holds a BIC; (b) is designated as a reachable party by a TIPS DCA holder or by an ancillary system; (c) is a correspondent, customer or branch of a TIPS DCA holder or a participant of an ancillary system, or a correspondent, customer, or branch of a participant of an ancillary system; and (d) is addressable through the TIPS Platform and is able to submit instant payment orders and receive instant payment orders either via the TIPS DCA holder or the ancillary system or, if so authorised by the TIPS DCA holder or by the ancillary system, directly.»;

3. se suprime la definición de «proveedor del servicio de red de TIPS».

   2) En el artículo 2, se añade el texto siguiente en el apartado primero: «Appendix VII: Requirements regarding information security management and business continuity management».

   3) El artículo 3 se modifica como sigue: a) en el apartado 2, la letra f quater) se sustituye por el texto siguiente: «(fc) TIPS DCA to PM liquidity transfer orders and PM to TIPS DCA liquidity transfer orders;»;

2. en el apartado 2 se inserta la siguiente letra f quinquies): «(fd) TIPS DCA to TIPS AS technical account liquidity transfer orders and TIPS AS technical account to TIPS DCA liquidity transfer orders; and»;

3. el apartado 3 se sustituye por el texto siguiente:

   «3. TARGET2 provides real-time gross settlement for payments in euro, with settlement in central bank money across PM accounts, T2S DCAs and TIPS DCAs. TARGET2 is established and functions on the basis of the SSP through which payment orders are submitted and processed and through which payments are ultimately received in the same technical manner. As far as the technical operation of the T2S DCAs is concerned, TARGET2 is technically established and functions on the basis of the T2S Platform. As far as the technical operation of the TIPS DCAs and TIPS AS technical accounts is concerned, TARGET2 is technically established and functions on the basis of the TIPS Platform.».

   4) El artículo 5 se sustituye por el texto siguiente:

   «Article 5 Direct participants PM account holders in TARGET2-ECB are direct participants and shall comply with the requirements set out in Article 8(1) and (2). They shall have at least one PM account with the ECB. PM account holders that have adhered to the SCT Inst scheme by signing the SEPA Instant Credit Transfer Adherence Agreement shall be and shall remain reachable in the TIPS Platform at all times, either as a TIPS DCA holder or as a reachable party via a TIPS DCA holder.».

   5) El artículo 22 se sustituye por el texto siguiente:

   «Article 22 Security Requirements and Control Procedures

   1. Participants shall implement adequate security controls to protect their systems from unauthorised access and use. Participants shall be exclusively responsible for the adequate protection of the confidentiality, integrity and availability of their systems.

   2. Participants shall inform the ECB of any security-related incidents in their technical infrastructure and, where appropriate, security-related incidents that occur in the technical infrastructure of the third party providers. The ECB may request further information about the incident and, if necessary, request that the participant take appropriate measures to prevent a recurrence of such an event.

   3. The ECB may impose additional security requirements, in particular with regard to cybersecurity or the prevention of fraud, on all participants and/or on participants that are considered critical by the ECB.

   4. Participants shall provide the ECB with: (i) permanent access to their attestation of adherence to their chosen network service provider’s endpoint security requirements, and (ii) on an annual basis the TARGET2 self-certification statement as published on the ECB’s website in English.

   4a. The ECB shall assess the participant’s self-certification statement(s) on the participants level of compliance with each of the requirements set out in the TARGET2 self-certification requirements. These requirements are listed in Appendix VII, which in addition to the other Appendices listed in Article 2(1), shall form an integral part of these Conditions.

   4b. The participant’s level of compliance with the requirements of the TARGET2 self-certification shall be categorised as follows, in increasing order of severity: ‘full compliance’; ‘minor non-compliance’; or ‘major non-compliance’. The following criteria apply: full compliance is reached where participants satisfy 100% of the requirements; minor non-compliance is where a participant satisfies less than 100% but at least 66% of the requirements and major non-compliance where a participant satisfies less than 66% of the requirements. If a participant demonstrates that a specific requirement is not applicable to it, it shall be considered as compliant with the respective requirement for the purposes of the categorisation. A participant which fails to reach ‘full compliance’ shall submit an action plan demonstrating how it intends to reach full compliance. The ECB shall inform the relevant supervisory authorities of the status of such participant’s compliance.

   4c. If the participant refuses to grant permanent access to its attestation of adherence to their chosen NSPs endpoint security requirements or does not provide the TARGET2 self-certification the participant’s level of compliance shall be categorised as ‘major non-compliance’.

   4d. The ECB shall reassess compliance of participants on an annual basis.

   4e. The ECB may impose the following measures of redress on participants whose level of compliance was assessed as minor or major non-compliance, in increasing order of severity: (i) enhanced monitoring: the participant shall provide the ECB with a monthly report, signed by a senior executive, on their progress in addressing the non-compliance. The participant shall additionally incur a monthly penalty charge for each affected...