![\"RegTech](\"https:\/\/solutionsreview.com\/data-management\/files\/2022\/10\/RegTech-Solutions.jpg\")
<\/p>\n<\/p>\n
This is part of Solutions Review\u2019s Premium Content Series, a collection of contributed columns written by industry experts in maturing software categories. In this submission, MirrorWeb<\/a> Chief Operating Officer Harriet Christie offers a look at RegTech solutions through the lens of several key industries. Such growth has been precipitated by a major upsurge in demand for a variety of reasons, but mainly \u2018a looming regulatory burden\u2019. The majority of RegTech companies work with clients in the financial services industry; it\u2019s the most heavily regulated<\/a>, after all.<\/p>\n That \u2018looming regulatory burden\u2019, however, does not just apply to the financial services sector. Below we\u2019ll look at three other industries which are becoming increasingly regulated as time passes. But first, why are we seeing more regulation than ever?<\/p>\n A digital approach to working was greatly accelerated by the COVID-19 pandemic for many industries, as remote infrastructures needed to be conjured with great urgency, and communications habits shifted when face-to-face interactions became impossible. While a bedding-in period was permitted from a compliance perspective, JP Morgan\u2019s $200 million fine in December 2021 seemed to signify that this adaptation period was over<\/a>.<\/p>\n Regulation means a great deal of extra work for any company, but it also demonstrates transparency and accountability and therefore helps to build trust not just with regulators, but with customers and prospects alike. While certain industries (like financial services) lend themselves to greater regulatory attention than others, most are heading in the same direction, albeit at different speeds. Many will soon need to take more proactive steps towards adherence as their abundance of data is increasingly scrutinized, including the following examples.<\/p>\n One of the difficulties with regulating cybersecurity, and a deterrent up until this point, is that it is “an industry founded in rulebreaking<\/a>.” How do you regulate a sector built to protect computer systems, when the groups that it is protecting from operate outside of any rulebook, and constantly devise new means of breaching the systems they\u2019re targeting? Any regulatory framework can never be truly current; it\u2019s a question of being as up-to-date as possible, rather than absolutely so.<\/p>\n In March 2022, SEC Chairman Gary Gensler proposed rules to \u2018enhance and standardise disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies.\u2019 These disclosures were intended to keep investors better informed, and included reporting around cybersecurity incidents, plus periodic reporting for updates on previously reported incidents, as well as policies and procedures to identify and manage cyber risk.<\/p>\n It\u2019s a lot of additional work to contend with. Considering the intricacies of the new rules and existing state regulations, third party solutions may appeal to RIAs hoping to prepare effectively for the new landscape. One option for those interested in deploying an automated solution for cyber is to look for a provider that already specializes in RIA compliance<\/a>. This would include the solutions providing compliance services in the financial services sector, for example.<\/p>\n The healthcare industry accumulates an enormous amount of sensitive patient data on a daily basis, particularly in a world of increasing virtual consultations. Healthcare organizations are obliged to meet regulatory requirements from the Health Insurance Portability and Accountability Act (HIPAA), and the use of new and varied communications has made compliance increasingly difficult.<\/p>\n The government has \u2018used its discretion\u2019 in penalizing HIPAA noncompliance \u2018occurring in good faith\u2019 during the pandemic (a Public Health Emergency) and beyond. This meant that the provision of telehealth services was relaxed, \u2018allowing providers to deliver care through a broad range of devices and technology platforms<\/a>.\u2019<\/p>\n While such a reprieve was pragmatic and undoubtedly welcome, compliance officers need to be aware that it\u2019s not a permanent resolution. Although some telehealth \u2018flexibilities\u2019 have become a permanent part of the landscape, others will expire<\/a> 151 days after the end of the federal PHE, which was recently extended<\/a> for another 60 days beyond July 15th.<\/p>\n The administration used the pandemic as a time to investigate illicit areas<\/a> of telehealth, such as \u2018telefraud\u2019 scams that leverage aggressive marketing (e.g. cold-calling patients) or provide fraudulent telemedicine services. Post PHE, the government will use these findings to prioritize enforcement<\/a>, with the Department of Justice\u2019s Health Care Fraud Unit explicitly stating that they are \u201cdedicated to rooting out schemes that have exploited the pandemic.\u201d As such, it will be important for healthcare providers to provide records of their historical and ongoing marketing communications, including email campaigns and websites, in order to prove compliance.<\/p>\n Following a tumultuous year in the crypto market, March 2022 saw President Biden sign an Executive Order on the Responsible Development of Digital Assets<\/a>. Many considered this a significant breakthrough for the industry, and it demonstrated the administration\u2019s acceptance that crypto was indeed worthy of regulation. This is particularly notable after many years of being deemed ungovernable and \u2018a Wild West\u2019, including by the SEC Chairman<\/a> himself, Gary Gensler.<\/p>\n The government is, however, starting from scratch on crypto, and months down the line, there is still uncertainty around what this regulatory framework will look like. The document was essentially a callout to a variety of relevant organizations (from the Treasury to the SEC) to spend time doing their due diligence, before sharing suggestions around how each of its objectives can be met most effectively.<\/p>\n This constructive and collaborative approach gives the best possible opportunity for the uniform application of regulations from ‘one rule-book<\/a>‘, as favored by Gensler. This is strengthened by the fact that leading states have begun to follow the federal lead and issue their own Executive Orders<\/a> in a similar vein. In terms of the desired outcomes, consumer protection is again a priority, and so customer-facing communications are once again likely to be heavily scrutinized in order to ascertain compliance, as with the financial services industry.<\/p>\n Many argue that RegTech is too young an industry to be regulated itself, as regulation can in fact hamper innovation<\/a> for businesses at such an early stage of growth.<\/p>\n However, while it may feel a little meta and Inception-esque (regulation within regulation), shouldn\u2019t RegTech firms be held to the same standards as the clients they protect? There is no existing regulatory framework to oversee RegTech firms, and what better way to instill faith in clients and prospects than by demonstrating that they\u2019re outsourcing to a third-party firm that knows how to present themselves (and by implication, others) in a compliant, trustworthy manner.<\/p>\n It\u2019s a fine line that must be negotiated delicately.<\/p>\n In an increasingly digital, siloed world, RegTech services will continue to proliferate. Trust from consumers must be earned in different ways and is less contingent on smooth-talking executives, but compliance with the appropriate statutes and regulations.<\/p>\n Corporate conduct can now be held to a higher standard due to the abundance of information at regulators\u2019 disposal. Examples like Deutsche Bank\u2019s recent setback<\/a> show that large corporations are increasingly accountable and that there are less places to hide in the age of information. The level of scrutiny is growing across the board, and so, by extension, is the number of heavily regulated industries. Crypto, healthcare, and cyber are likely just the tip of the iceberg.<\/p>\n
\n<\/em><\/strong><\/p>\n![\"SR](\"https:\/\/solutionsreview.com\/data-management\/files\/2021\/12\/SR-Premium-Content.gif\")
Regulatory technology (RegTech) companies perform exactly the function you\u2019d expect; they provide technology that is used by businesses to manage and enhance regulatory processes in order to achieve and prove compliance. It\u2019s a sector that is now growing<\/a> at a pace of 19.5 percent annually and is expected to hit $21.73 billion by 2027, according to Reports and Data<\/a>.<\/p>\n\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/data-management\/files\/2019\/01\/data-management-vendor-map-sb-cta.jpg\")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nRegTech: Why is More Regulation Necessary?<\/strong><\/h2>\n
Cybersecurity<\/strong><\/h3>\n
Healthcare<\/strong><\/h3>\n
Crypto<\/strong><\/h3>\n
And What About RegTech itself?<\/strong><\/h3>\n
Final Thoughts<\/strong><\/h4>\n
![\"Insight](\"https:\/\/solutionsreview.com\/wp-content\/uploads\/2023\/11\/ij2.jpg\" "\\"Insight")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"