CSSF Circular on teleworking: governance and security requirements applicable as of 1 July 2022

04 Apr 2022


On 31 March 2022, Luxembourg’s financial supervisory authority (CSSF) published CSSF circular 22/804 which updates CSSF circular 21/769 (hereinafter referred to as the “Circular”).

Within the context of this update, it is expected that the CSSF Circular on teleworking will come into force on 1 July 2022.

As a reminder, the introduction of teleworking in the financial sector does not require the CSSF’s approval. The purpose of the Circular is to define the requirements associated with organisation, internal controls and information security with which entities supervised by the CSSF must comply when they introduce teleworking solutions for their employees.

The Circular does not cover contractual relationships between supervised entities and their employees.