All the glossaryGlossary

Law & regulation

The texts and authorities that frame the industry: Solvency II, DORA, GDPR, the European AI Act, national and European supervisors, and the liability concepts attached to them.

95 terms
Actuarial functionAI Act risk tiersAI Liability DirectiveAleatory contractANSSI (French National Cybersecurity Agency)Basel Committee on Banking Supervision (BCBS)Bermuda Monetary Authority (BMA)Biometric dataBusiness judgment ruleChanneling of liabilityConformity assessment (AI Act)Cyber Resilience ActCyber war exclusion clauseData breach notification (72 hours)Data brokerData minimizationDevelopment-risk defenseDirect physical lossDisparate impactDORA (Digital Operational Resilience Act)DORA register of informationDownstream deployer liabilityDuty to adviseEIOPA guidelinesENISA (EU Agency for Cybersecurity)ESG criteriaEssential entity / important entity (NIS2)EU AI ActEuropean Insurance and Occupational Pensions Authority (EIOPA)European oversight of critical technology providersFiduciary duty in cybersecurityFinal adjudicationFinancial Conduct Authority (FCA)Financial Stability Board (FSB)Fit and proper requirementsForce majeureFrench Prudential Supervision and Resolution Authority (ACPR)Fundamental Review of the Trading Book (FRTB)Fundamental rights impact assessment (FRIA)GDPR (General Data Protection Regulation)German Federal Financial Supervisory Authority (BaFin)Global systemically important insurer (G-SII)GreenhushingGreenwashingGroup supervisionHigh-risk systemInsurance Capital Standard (ICS)Insurance Distribution DirectiveInsurance Recovery and Resolution DirectiveInternational Association of Insurance Supervisors (IAIS)ISO 27001 / NIST CSFKey functionsLamfalussy processLimitation of liabilityLitigation fundingLoi Résilience (French Resilience Act)Major incident reportingMinimum Capital Requirement (MCR)Monetary Authority of Singapore (MAS)Money launderingNational Association of Insurance Commissioners (NAIC)Neural dataNIS2 DirectiveOFAC sanctions on ransomware paymentsOnboardingOutsourcing of critical functionsPost-market monitoring (AI)Presumption of defectivenessPRIIPsProduct liabilityProduct oversight and governanceProhibited AI practicesProportionality principleProximate causePrudent person principleQuantitative reporting templatesRevised Product Liability DirectiveRight not to be subject to automated decision-making (GDPR)Right to be forgottenSanctions exclusion clauseSecurities class actionSolvency and Financial Condition ReportSolvency IISolvency II reviewSolvency II three pillarsSovereign immunityStandard of careStrict liabilitySubstantial modificationTest-AchatsThreat-led penetration testingTitle riskUmpireVicarious liabilityWashington Principles
Other categories
CyberInsuranceReinsuranceActuarial scienceAIFinanceMarketsSpecial risksSustainable insuranceInfrastructure & data centersSpace risksAlternative risk transferTransportLife & protectionClaims & settlement