PGI Singapore Insurance Law & MAS Regulations 2 — Questions and Answers
Question 1: What is the purpose of MAS's 'stress testing' requirements for Singapore insurers?
- To test the insurer's IT systems only
- To assess whether insurers can withstand severe but plausible adverse scenarios and maintain solvency (Correct answer)
- To test the performance of investment portfolios only
- To measure the speed of claims processing
Correct answer: To assess whether insurers can withstand severe but plausible adverse scenarios and maintain solvency
Stress testing requires insurers to model the impact of severe adverse scenarios (economic shocks, catastrophic events) on their financial position, ensuring they hold sufficient capital buffers to remain solvent under stress.
Question 2: What is Singapore's MAS Technology Risk Management (TRM) Guidelines requirement for insurers?
- Insurers must use only Singapore-developed technology
- Insurers must implement robust IT governance, cybersecurity measures, and technology risk management to protect operational resilience (Correct answer)
- Insurers must outsource all IT to MAS-approved vendors
- Technology risk is excluded from insurance regulation
Correct answer: Insurers must implement robust IT governance, cybersecurity measures, and technology risk management to protect operational resilience
MAS TRM Guidelines require insurers to implement comprehensive technology governance, cybersecurity controls, incident management, and business continuity measures to ensure operational resilience in an increasingly digital environment.
Question 3: What is Singapore's approach under the Insurance Act to 'run-off' insurers?
- Run-off insurers are immediately liquidated
- MAS supervises run-off insurers (those no longer writing new business) to ensure they can still meet outstanding obligations to existing policyholders (Correct answer)
- Run-off insurers are automatically acquired by the PPF Scheme
- Run-off insurers are exempt from all MAS regulations
Correct answer: MAS supervises run-off insurers (those no longer writing new business) to ensure they can still meet outstanding obligations to existing policyholders
MAS continues to supervise insurers in run-off — those that have stopped writing new business but still have outstanding obligations. This ensures remaining policyholders' interests are protected until all obligations are settled.
Question 4: What does Anti-Money Laundering (AML) compliance require of Singapore insurers?
- Reporting only cash transactions above S$1 million
- Customer due diligence, transaction monitoring, and reporting suspicious transactions to authorities (Correct answer)
- Refusing coverage to foreign nationals
- Keeping all transactions confidential from MAS
Correct answer: Customer due diligence, transaction monitoring, and reporting suspicious transactions to authorities
AML compliance requires insurers to conduct customer due diligence (know your customer), monitor transactions for suspicious activity, and report suspicious transactions to the Suspicious Transaction Reporting Office (STRO).
Question 5: What is the 'Financial Action Task Force' (FATF) recommendation's significance for Singapore insurers?
- FATF sets insurance premium guidelines
- FATF standards form the basis of Singapore's AML/CFT framework that insurers must comply with (Correct answer)
- FATF regulates cross-border insurance sales
- FATF manages Singapore's insurance guarantee scheme
Correct answer: FATF standards form the basis of Singapore's AML/CFT framework that insurers must comply with
FATF recommendations form the international standard for anti-money laundering and counter-terrorism financing. Singapore's MAS framework for insurers is largely based on FATF standards, applied domestically through MAS Notices and guidelines.
Question 6: Under the Personal Data Protection Act (PDPA), what must Singapore insurers do with customer personal data?
- Share data freely with all business partners
- Collect, use, and disclose data only with customer consent and for notified purposes (Correct answer)
- Store data indefinitely for audit purposes
- Transfer data overseas without restriction
Correct answer: Collect, use, and disclose data only with customer consent and for notified purposes
Under PDPA, insurers must obtain customer consent before collecting, using, or disclosing personal data, and can only use it for the purposes notified to the customer. Data protection obligations are ongoing.
What is the purpose of MAS's 'stress testing' requirements for Singapore insurers?