Outsourcing critical or important functions or activities
Outsourcing policies
Consideration of appropriate factors

The EU Solvency II Directive (2009/138/EC) was transposed into domestic Irish law by the European Union (Insurance and Reinsurance) Regulations 2015.(1) The Solvency II regime provides welcome clarity regarding the functions that an insurer may outsource and the requirements which must be complied with before outsourcing. This is particularly welcome news for those insurers which rely heavily on outsource service providers.

Outsourcing critical or important functions or activities

Where a critical or important function or activity is being outsourced, prior notification must be made to the Central Bank in a timely manner (at least six weeks before the outsourcing is due to come into effect). Notification must also be made where there are subsequent material developments with respect to the outsourced functions or activities. In determining whether an outsourced function or activity is critical or important, the undertaking should assess whether it is essential to its operation and whether it would be unable to deliver its services to policyholders without it.

Under the Solvency II regime, any outsourcing must not:

  • materially impair the undertaking's system of governance;
  • cause an undue increase in operational risk;
  • impair the supervisory monitoring of compliance with obligations; or
  • undermine continuous and satisfactory service to policyholders.

Outsourcing policies

Insurers intending to engage in outsourcing must ensure that they have written outsourcing policies in place. These policies must be reviewed at least on an annual basis and adapted in view of any significant changes. The policies and any amendments thereto must be subject to prior approval by the insurer's board of directors.

Consideration of appropriate factors

Where critical or important functions or activities are to be outsourced, a written outsourcing agreement must be entered into with the outsource service provider. This written agreement will provide the requisite evidence to the Central Bank that all key factors have been taken into account. The insurer must also provide evidence that it has carried out a fitness and probity assessment and appropriate due diligence in respect of the outsource service provider.

Key factors which should be contained in a written outsourcing agreement include:

  • clear definitions of the duties and responsibilities of both parties;
  • the duration of the outsourcing;
  • requirements that the service provider comply with all applicable laws, regulatory requirements and guidelines and cooperate with the undertaking's supervisory authority;
  • an obligation that the service provider disclose any development which may have a material impact on its ability to carry out the outsourced functions and activities;
  • termination periods sufficient to prevent detriment to the continuity and quality of service;
  • a right for the insurer to be informed about the outsourced functions and activities and their performance by the service provider, as well as a right to issue general guidelines and individual instructions;
  • effective access by the insurer, its external auditor and the Central Bank to all information on the outsourced functions and activities and permission to conduct on-site inspections;
  • the ability for the Central Bank to address questions directly to the service provider, to which it must reply; and
  • the terms and conditions of any sub-outsourcing that the service provider may carry out.


The certainty provided by the Solvency II regime is good news for insurers. It clarifies the requirements for outsourcing and any factors which must be considered before entering into an outsourcing agreement. However, it is vital for insurers to check their existing outsourcing agreements to confirm that these meet all relevant Solvency II requirements and include the required key provisions.

For further information on this topic please contact Darren Maher at Matheson by telephone (+353 1 232 2000) or email ([email protected]). The Matheson website can be accessed at www.matheson.com.


(1) The European Union (Insurance and Reinsurance) Regulations 2015 entered into force on January 1 2016.