Financial Secretary, Dr Patrick Fung, Ms Carrie Leung, distinguished guests, ladies and gentlemen, good morning to you all.
- Let me take this opportunity to congratulate the Hong Kong Institute of Bankers on its 10th Annual Banking Conference. In 2009, banking professionals came together at the inaugural Conference to discuss responses to the Global Financial Crisis. Over the past decade, Conference participants have also examined other important strategic issues, including opportunities arising from RMB internationalisation, transformation of the banking sector amid a rapidly changing macro and regulatory landscape, and the implications of accelerating digitalisation. I am sure you all agree that the Conference is an important flagship event for the industry, and it offers a constructive platform for exchanging views on topical issues.
- The HKMA has long supported the Conference, because it gives us an opportunity to share our views on significant regulatory issues and policy initiatives, with our seven Smart Banking initiatives being the latest ones. As the Financial Secretary mentioned earlier in his keynote, substantial progress has been made in each of the seven Smart Banking initiatives since they were announced last year. The Financial Secretary has already highlighted the progress made by the HKMA in respect of those initiatives and therefore I won’t repeat it. I would nevertheless like to demonstrate how the Smart Banking initiatives are re-shaping the banking sector landscape.
Industry responses to the Smart Banking initiatives
- I have always looked at the Smart Banking Initiatives as a journey. And I am glad to say that we have made good progress with our relevant policy measures throughout this journey. I am particularly excited about the encouraging responses from the banking industry and tech community, which share a common goal of transforming Hong Kong’s financial ecosystem by creating better synergy between banking and technology. Let me highlight some of the positive responses we have observed in respect of these Smart Banking initiatives.
- First, from the perspective of the banking industry,
- We have seen the launch of more than 70 major digital banking and fintech initiatives from various banks since the announcement of the seven initiatives last year. There were more than 20 projects related to mobile payments; 12 biometric authentication initiatives using different biometric attributes, such as fingerprint, finger-vein, voiceprint and facial features; 7 software security tokens; and 30 others, including chatbots powered by artificial intelligence, and enhanced financial services leveraging distributed ledger technologies and social media platform integration.
- In addition, we already had the successful launch of remote onboarding services in Hong Kong, and more than 10 banks are preparing to launch similar services. Also, around 10 banks plan to launch online personal lending services that leverage machine learning technologies and data analytics. Banks are now able to reach out and deliver more financial services with good user experience to a wider spectrum of customers via mobile phones and other online channels.
- Secondly, if we take a closer look at the tech community’s involvement, it is not difficult to see that many of the initiatives I just mentioned are the result of collaboration between the banking industry and the tech community. Since the upgrade of our Supervisory Sandbox last November, tech firms have directly accessed the Sandbox’s Chatroom in more than 110 cases to seek the HKMA’s early regulatory feedback on their projects and ideas. This means they are better prepared to collaborate with banks to launch fintech products and services. These uses of the Chatroom are on top of around 50 cases used by banks. The rollout of the Open API Framework, and the phase one implementation roadmaps submitted by banks to the HKMA, show there will be an even higher level of integration and collaboration between the banking industry and the tech community.
- Thirdly, more than 70 firms, including local and overseas technology and financial firms, have expressed interest in establishing virtual banks in Hong Kong. As of 31 August, we have received about 30 applications to operate a virtual bank. Some of those applications are already “substantially complete”, so we would include them in the first batch of applications for processing. We expect to start granting licences to virtual banks around the end of this year or early next year. I believe establishment of virtual banks will provide further traction to the growth of the Smart Banking ecosystem in Hong Kong.
- Fourthly, the Smart Banking ecosystem is not complete without support from the general public and customers. I am glad to see that a large number of bank customers have signed up with the Faster Payment System (FPS) since the launch of customer registration on 17 September for registration.
Growing significance of Regtech in the Smart Banking Era
- As we watch the positive development of the Smart Banking ecosystem, it is also important that we maintain momentum. This year, the conference’s theme, “Banking for a Smart Society”, reminds us not to be complacent. We should continue to work collectively to further develop the ecosystem.
- While we naturally pay more attention to new or innovative digital financial services that become available to bank customers as a result of the Smart Banking initiatives, let’s not forget that Fintech is not only about the interface between banks and customers. The importance of a key Fintech segment, Regtech – regulatory technology – in supporting and facilitating the interface between banks and the regulators, should not be understated nor overlooked. I would like to therefore provide a supervisor’s perspective on Regtech in the Smart Banking era.
- When we look at Regtech, some may immediately start to envisage the substitution of us, banking supervisors, with technologies such as artificial intelligence (AI) or “robo-regulators”. While some of you might indeed prefer a robo-regulator delivering this speech, this is not something that Regtech is intended or able to deliver at this point, unfortunately. Frankly, I hope that you would still prefer listening to my sharing, rather than from a tall and handsome robo-regulator, even if such a robot were a reality today. Joking aside, Regtech does offer a tremendous potential to complete the Smart Banking ecosystem.
- Before I discuss our plan for Regtech, I would like to reiterate what Regtech means. As I have mentioned, from the perspective of banks, there are two interfaces that they have to address: one between banks and customers, and the other between banks and the HKMA. The general priority of banks under the Smart Banking initiatives so far has been to concentrate on the interface between banks and customers to offer better digital financial services to users. However, some meaningful progress has been made to streamline the interface between banks and their regulators, such as the work under the Banking Made Easy initiative and the Balanced and Responsive Supervision Programme that I explained at this Conference last year. We do see a need to further facilitate banks’ use of technologies for compliance with regulatory requirements of the HKMA and other regulators and for risk management purposes. Regtech, which essentially means the use of innovative technologies by banks to achieve regulatory compliance or better risk management in a more effective and automated manner, is well positioned to further enhance the interface between banks and regulators.
- Regtech developments are growing rapidly particularly in the areas of transaction monitoring, regulatory reporting, risk management and compliance. According to a recent report, investment in Regtech companies reached US$1 billion globally in 2017. But why is Regtech gaining popularity? I believe there are three key drivers:
(a)
|
First is the increase in the complexity and scope of more stringent regulations globally such as Basel III and enhanced standards for combating money laundering. A few recent studies have suggested that the volume of global regulatory changes went up by at least five-fold in the past decade. Hence, there has been a growing desire of the banking industry, particularly in jurisdictions with more daunting regulatory requirements, to explore the use of new technologies to enhance the effectiveness and lower the cost of their compliance efforts.
|
(b)
|
The second driver is the sheer volume of transactions and data that many banks need to handle as the economy and business continue to grow. If we take the mobile wallet market as an example, research predicts cumulative annual growth of 32% in global e-wallet transactions between 2017 and 2022. Such a scale of transactions means it would simply be impracticable for some banks and e-wallet operators to effectively manage the associated risks using traditional or manual risk management approaches.
|
(c)
|
The third and final driver is the higher availability of Regtech solutions. Increasing computing powers, together with accessibility of data and applications of new technologies, have contributed to an increased commercialisation of Regtech solutions available to the banking industry.
|
- Recognising the growing need for, and developments of, Regtech solutions, we at the HKMA consider it timely to work with the banking industry and the technology community to further facilitate the adoption of Regtech in Hong Kong. To help develop the Regtech ecosystem here, the HKMA will open the Fintech Supervisory Sandbox to Regtech projects or ideas raised by banks or tech firms. I am also pleased to say that the HKMA will soon launch a series of Regtech-specific projects, through its Banking Made Easy initiative, focusing on four areas:
(a)
|
AML/CFT surveillance technologies;
|
(b)
|
Regtech for prudential risk management and compliance;
|
(c)
|
Study on machine-readable regulations; and
|
(d)
|
HKMA’s exploration of Suptech.
|
- Let me explain each initiative in greater detail.
AML/CFT surveillance technologies
- About AML/CFT surveillance, one should bear in mind that the financial system is the gateway through which criminals must pass to make crime pay. The reality is that financial system is becoming more efficient because of technology. Efficiency brings enhanced services to customers, which are delivered through channels and at speeds we could have only dreamed of a few years ago. But these developments can equally be attractive to criminals.
- This is where banks should come in. Banks are expected to be on the frontline of combatting financial crimes given Hong Kong’s role in the global economy. As our knowledge of the size of the threat improves, expectations of how banks should perform this role have also increased. This also means that managing financial crime risk has become a significant compliance undertaking, particularly in the area of transaction monitoring.
- But the ability for banks to work in a sea of data and fund flows is indeed very challenging. It is not that our systems do not produce results, judging from an average annual growth of 40% in the past five years in suspicious transaction reports. Rather, it is the degree of success by which those results contribute to the objectives of our AML system – to deter, disrupt and detect – that are increasingly under scrutiny
- To improve our work, Regtech solutions are increasingly being recognised as highly applicable in AML. Data analytics and machine learning are seen as having huge potential to complement banks’ processes in AML/CFT surveillance, and improve efficiency and effectiveness of the process.
- For example, the generation of huge numbers of alerts by transaction monitoring systems, which can sometimes require armies of analysts to process, is a pain point for banks. We note that some banks use machine learning and artificial intelligence to help detect and recognise suspicious behaviours and patterns, as well as to facilitate the closing of low-risk alerts. This helps free up precious analysts resources to focus on investigating high-risk cases, and in turn enhance the overall effectiveness and efficiency of the transaction monitoring process.
- Let me be clear that this is not technology at any cost. We must fully understand the pros and cons of what these changes will mean to banks’ AML systems and controls. At the same time we cannot outsource this responsibility to technology firms. Some of you will know from our work with a Regtech firm specialising in testing screening systems that we expect banks to understand why a machine makes the recommendations it does.
- Going forward, if we are going to address the challenges, we need to be ambitious. The HKMA plans to move in the coming months from a one-to-one type engagement in our Chatroom, to a many-to-many type engagement where banks, stored value facility (SVF) operators, technology specialists and the regulator come together to tackle AML pain points. This will initially target one or two challenges, but will aim to build momentum and turn the successes into mainstream AML solutions that contribute to effectiveness and efficiency.
- But that perhaps is still not enough. New technology comes at the right time not only for the regulatees, but also for regulators. With the advice from technology experts, we will embark upon a study to enhance the timely retrieval and transmission of AML/CFT related information and data from banks and SVF operators in a digitalised and efficient way, as opposed to the old-fashioned way of regulatory returns and surveys. At the same time, we will also explore data analytics tools for processing the data collected in order to generate useful analyses for furthering our capability to understand and assess the ML/TF risks at the sectoral level, as well as to provide feedback to individual regulatees where appropriate. These will hopefully lead to an evolution and re-shaping of regulatory interface between the HKMA and market practitioners to enhance AML/CFT surveillance capability of all.
Regtech for prudential risk management and compliance
- Another area of focus is on Regtech for prudential risk management and compliance. The often-analytical nature of prudential risk management has created room for technology to improve risk management efficiency and effectiveness. Based on recent overseas and local developments, we have seen the Regtech community and some financial institutions producing rather innovative ideas. They are exploring the use of advanced technology in prudential risk management and compliance, such as capital optimisation, model risk management, stress testing, trading and portfolio management, fraud detection and cybersecurity.
- One possible Regtech use case in this area is related to the post-sales analysis of phone calls made by banks’ sales staff, leveraging technologies that turn voice-recordings to text for checking against banks’ internal guidelines. In so doing, it should be easier for banks to identify improper sales activities that warrant attention and follow-up actions. Another potential use case relates to the Basel Committee’s “Principles for Effective Risk Data Aggregation and Risk Reporting”, which require systemically important banks to have a high degree of automation in risk data aggregation and reporting. We would explore with the industry to identify whether Regtech can be adopted to achieve the expected data aggregation. Separately, we have also noted that some banks in Hong Kong have applied machine learning technologies to model validation to challenge existing models’ outputs and to construct missing data during the course of model risk management and regulatory stress testing.
- The HKMA will engage the banking industry and Fintech community to identify possible ideas where Regtech may be explored in prudential risk management and compliance in Hong Kong. We would also provide supervisory guidance or clarifications to facilitate the applications of these technologies. And these work will be pursued as part of our Banking Made Easy initiative.
Study on machine-readable regulations
- The third area that we would explore is related to machine-readable regulations. Today, banks apply different levels of automation in their regulatory processes, but the steps involving the capture and interpretation of regulations remain largely manual. With the growing sophistication of regulations, banks may find it challenging to navigate and process new or amended regulations in a timely manner. We believe this is where machine-readable regulations may help.
- Machine-readable regulations involve rather new concepts, although without much widespread implementation by financial regulators internationally at this stage. One principal objective of it is, in theory, to facilitate banks to make use of technologies to automate their interpretations of regulatory requirements. This is particularly helpful when there are changes to such requirements, and consequently banks must examine necessary revisions to their compliance processes and reporting arrangements. This would not only reduce the manual efforts of banks in complying with regulatory requirements, but also lower the risk of errors and omissions as a result of fewer human interventions.
- Although the idea of machine-readable regulations is still at the conceptual stage, the HKMA will conduct a deep-dive study on the needs for, and possibilities of, machine-readable regulations in respect of selected regulatory requirements. We hope the study will give us better insights on whether machine-readable regulations are desirable and feasible in Hong Kong, and at the same time encourage the industry to explore the use of new technology in enhancing the regulatory processes.
HKMA’s exploration of Suptech
- Last but not the least, the HKMA is going to explore the use of Suptech – supervisory technology – meaning the use of new technology to support and enhance our supervisory processes and activities.
- To be clear, the HKMA already uses technology in its supervisory process and analysis. We have undertaken several technology initiatives in the past few years to enhance our supervisory process. A few years ago we implemented a large-scale enhancement to our banking data collection and management system. Banks with more robust IT systems can now submit banking return data directly from their database to the HKMA through straight-through processing. In addition, the enhancement provides our supervisory teams with a set of Business Intelligence (BI) tools for more efficient data generation, analysis and presentation.
- Having said that, it is also important for us to keep up with technological advancement. In particular, we will explore the use of Suptech to enhance the effectiveness and forward-looking capability of our supervisory process. We can also seek to further automate our interactions with banks, such as streamlining banks’ regulatory data collection mechanism, enhancing digitalisation and analytics of supervisory information and automation of supervisory processes.
- As the HKMA engages the tech community in our exploration of Suptech, tech firms will also gain a better understanding of our regulatory requirements and supervisory processes. This in turn will help enhance our interface with the tech community, which will again be beneficial for the further development of the Regtech ecosystem in Hong Kong.
- All the above initiatives share a common objective, which is to identify challenges facing the industry throughout the regulatory compliance journey and build a more diversified Regtech ecosystem. The stocktaking of these challenges not only helps the banking industry realise its needs for Regtech and the potential benefits arising therefrom, but also helps the banking industry and technology community define clear problem statements in different areas of compliance and prudential risk management. As with any other technological development, innovation is best stimulated by a good understanding of the problem. When we encourage innovative ideas, we hope that a burgeoning demand can be created locally, thereby fuelling the development of the Regtech ecosystem in Hong Kong.
- To sum up, we believe the time is right for closer collaboration among the banking industry, technology community and the HKMA to give a push to the adoption of Regtech in Hong Kong. The HKMA is prepared to take a leading role with a view to facilitating this relatively less-noticed but nonetheless important jigsaw of the Smart Banking era. And let’s be clear that there will no doubt be challenges when we explore our new Regtech measures. And I would urge the industry and other stakeholders to actively participate in these initiatives to help Hong Kong further advance into the Smart Banking era. I hope that, with the HKMA taking a more proactive stance, we would inject the much needed momentum for us to work together towards a more sustainable development of the industry.
- Lastly, once again, I wish to express my gratitude to the Hong Kong Institute of Bankers for inviting me here today. Thank you.