Information Technology ICAI Journal Ref: October 2021 • Vol. 70 • No. 4 • pp. 43–48 (423–428) Peer Reviewed Technical Article

Reg Tech: Technology - Driven Revolutionary Compliance

CA. Piyush H Mekhia (Member of the Institute of Chartered Accountants of India)
Contact: ca.mekhia@gmail.com | eboard@icai.in

Executive Abstract & Regulatory Context

“The ascent of FinTech has not just advanced the operational effectiveness of the financial industry but also presented difficulties with effective regulatory compliance. RegTech – a revolutionary and essential dimension of FinTech – is the promising enabler of regulatory technologies (RegTech). To make regulatory compliance more viable and efficient, RegTech is emerging as mainstream. There is a growing development on the significance of regulatory control administrators to upgrade their ability using RegTech. RegTech holds great potential to enhance regulatory compliance. Although RegTech is considered to be in the early stage of developments, there is a need to discuss and apply it to streamline financial regulations and supervision. This paper focuses on the basic and organisational aspects of RegTech by using AI, Blockchain, Big Data and other embedded technologies—which improves overall RegTech framework.”

1. Introduction and History of RegTech

1.1 Introduction

FinTech, through which RegTech originates, depicts technology that looks to automate and improve the delivery and application of services. FinTech can be utilized to help entrepreneurs, customers and businesses better manage their financial tasks, lives and processes using specific applications’ and algorithms which can be applied to PCs as well as progressively, cellular phones. FinTech, is a derivation from “Financial Technology”.

RegTech is derived from the words “Regulatory and technology”. It is sphere that provides a variety of regulatory services for businesses inside the monetary, health, insurance coverage, along with other industries.

RegTech is managing of regulating procedures in the company via technology. The key functions of RegTech comprise regulatory monitoring, compliance and reporting. RegTech is composed of a group of companies which uses cloud technologies and processing software-as-a-service (SaaS) to help businesses comply with legislation efficiently and less expensively. RegTech may also be known as regulating engineering. Finance associations and regulators both utilize RegTech to deal with complex compliances.

RegTech is a result of the emergence of technologies being upgraded. Pre RegTech, firms needed to preserve compliances manually and the process was costly and time consuming. As of now, RegTech firms provide solutions and technology to safeguard issues such as regulating tracking, data analytics, risk management, identity control and compliance.

Key Value Propositions: The 7 Core Claims of RegTech

RegTech helps financial organisations to enhance their handling of compliances. As an integral part of financial organisations’ push towards going digital, RegTech claims to:

1. Toughen Compliance & Risk: Toughen compliance and risk management across operational facets.
2. Cost Reduction: Diminishing fixed cost of the statutory compliance framework.
3. Client Safety: Boosting safety, confidentiality, and data protection of clients.
4. Resource Enhancements: Direct enhancements and tangible improvements in organizational resources.
5. Business Understanding: Provide an important, data-driven business understanding and operational visibility.
6. Quicker Client Help: Provide clients with better, proactive, and significantly quicker help.
7. Drive Innovation: Drive new innovative items, products, and administrative services.

Gradually RegTech is expected to have significant portion of overall regulatory spending. New technologies, very similar to machine learning (ML)/artificial intelligence (AI), predictive analytics, and data-driven promotion, will get rid of the guesswork and dependence outside of financial conclusions. Learning programs will learn the behaviour to produce automatic, subconscious savings and spendings.

FinTech is additionally a point of automatic customer service tech, utilizing chatbots and AI ports to help customers with the main mission not to mention hold down staffing expenses. FinTech is additionally being leveraged to combat fraud through leveraging advice regarding the foundation of payment to detain trades which could be outside the door.

1.2 Conceptualisation of RegTech

RegTech is a network of technology companies that resolve challenges originating from a technology-driven market through automation. The boost in digital products has increased data breaches, cyber hacks, and concealment, along with other fallacious pursuits.

With the usage of both big data and machine-learning technologies, RegTech lowers the opportunity to a firm’s compliance division by offering data on concealment actions conducted online. These are the actions that a normal compliance team may not know, due to the development of underground marketplaces on the internet.

RegTech tools conduct searches to detect instances that manifest itself online in the interval to spot issues or irregularities inside the electronic payment world. Any outlier is relayed into the establishment to research and confirm any fraudulent activity. Institutions which establish potential dangers to financial security can minimize the dangers and costs associated with lost data and funds breaches.

RegTech businesses team up with financial institutions and prohibitive bodies, utilizing cloud calculating and big data to share information. Cloud computing could be low-cost technology where users will discuss data in a quick and secure manner with different firms.

In short, RegTech is the practice of using a software process for regulatory management. A bunch of firms came along when realizing that technology could build the regulatory process easier. RegTech uses Software as a service (SaaS)—cloud computing, big data, and artificial intelligence—to manage regulatory compliance, and it reduces the strain on compliance groups by automating the process.

Cyberattacks, security breaches and money laundering are the most common occurrences in such an environment. RegTech helps organisations reduce these threats and is principally used in, however not restricted to, financial sectors and applications.

“RegTech firms provide solutions and technology to safeguard issues such as regulating tracking, data analytics, risk management, identity control and compliance.”

1.3 A Quick History of RegTech

The financial disaster in 2008 culminated into a boom in financial sector law. There was a growth in the unrestrained use of technologies within the financial industry. Technology led to a growth in the number of FinTech businesses that produced technology-driven tools to improve the consumer experience and involvement with financial firms.

The dependence on customer data to generate electronic products has resulted in worries among regulatory bodies, calling for more legislation on data privacy utilization and supply. The coupling of regulatory laws and measures using a business more reliant on technologies caused the demand for technology.

Landmark Milestone • UK Government FinTech Report

“FinTech has the potential to be applied to regulation and compliance to make financial regulation and reporting more transparent, efficient and effective – creating new mechanisms for regulatory technology, ‘RegTech’.”

Many firms are not able to keep themselves updated with expanding compliance requirements and transparent data security measures. These firms needed a robust technological resolution to assist with the following problems:

  • Extreme outlay and complication of compliance: Escalating costs and operational friction in managing vast regulatory mandates;
  • Dense automation methods: Navigating fragmented, rigid, and disconnected automation scripts across divisions;
  • Unsafe financial trades: Detecting malicious, fraudulent, and non-compliant payment transmissions in real time;
  • Human engagements causing mistakes: Eliminating manual clerical oversights, fatigue, and parameter misinterpretations.

2. Elements of RegTech

2.1 From KYC to KYD (The Three Evolutionary Stages)

RegTech is not a new category, yet as such distinct applications of technology; it is growing tremendously, driven by an increase in computing capability, the decreasing cost of technologies and big data explosion. We take a look at RegTech’s background into three stages:

1990s – 2000s

RegTech 1.0

RegTech 1.0 emerged around the 1990s and 2000s when financial institutions started introducing new technology to detect and investigations risks of particular regulations or procedures. These developed into quite a few of the qualitative risk management practices which we are conversant in now.

Last Decade (2010s)

RegTech 2.0

Over the last ten years, RegTech 2.0 has assisted companies to befit rules and better their supervision activities. Many RegTech programs have concentrated on ‘know your customer’ (KYC) by customer protection and herd behaviours.

Present & Future Frontier

RegTech 3.0: KYC to KYD

RegTech 3.0 is a transfer from ‘know your client’ to ‘know your data’ as the financial businesses currently on the brink of RegTech institutions have started to appear at regulation and risk as prediction and data issues which might be addressed by technology.

Fig. 1. How Know-Your-Client Solutions Work

End-to-End KYC/AML Architecture: Data Ingestion, Automated Integration, Rule-Engine Scoring, and Exception File Review
A
KYC Data Points

• Data field/quality standards
• Data standards approved by regulators are preferred

B
Data Integration

• Integration solution with structured/unstructured data
• Machine learning to improve data integration

C
Client Scoring (RegTech Stake)

• Rule engine analyzing structured/unstructured data
• Machine learning to improve score parameter calibration

D
File Review / Investigation

• Automated, smart, algorithm-based review
• Machine learning to improve score parameter calibration

E
Client Filing

• Automated data and content management
• Semantic data enrichment

Decision Pipeline Routing: New and existing clients are enriched with Data Provider and Evolving KYC Market Utilities feeds → Processed at Stage A & B → Evaluated at Stage C (Client Scoring). If passing score criteria (“Yes”), the client is instantly Cleared. If anomalous (“No”), the file routes to Stage D (File Review / In-depth Investigation) & Stage E (Client Filing). From Stage D, verified cases are marked Client Cleared (“Yes”), while unresolved high-risk profiles route to Exit / Termination (“No”).

2.2 The 3 Cs of RegTech

1. Compliance

The pace of regulatory change has shrunk – nonetheless – Compliance requirements will continue to grow as regulators concentrate on reforms beginning from oversight to systemic threat and priorities demonstrating data confidentiality and consumer protection.

2. Cost

Regulatory limitations and flat interest rates have made it harder for financial institutions to create a steady increase in earnings. Financial institutions’ that reduce price and adopt this technology will empower them to increase efficiency and productiveness with inside the dangers and compliance purposes. Since the price of hardware and applications has come down, investing in RegTech has become more affordable.

3. Complexity

Political events are increasing worldwide uncertainties because the financial region seeks to browse new goods, services and regulations. In addition to these components is the difficulty in the data environment, heritage system and functioning models.

The Reinvention Section: Since RegTech 3.0, all the 3 Cs are about monetary arrangements’ agenda. But cautious people are more focussed on compliance while radical companies have moved to handle costs. A couple of global investment banks have entered the reinvention section which permits them to look for responses to complexity and doubt and also make the transition to become a data entity.

2.3 Six Priorities to Focus

To advantage from this era of technological developments, the organization needs to focus on these 6 key primacies:

1
Modernize IT working system: Equip the core infrastructure and operational workflow for the ‘new normal’.
2
Reduce costs via streamlining: Decommission and streamline legacy systems by utilizing modern SaaS architectures.
3
Form customer-wise tech abilities: Build agile technological capabilities to get extra wise about your customers’ evolving needs.
4
Preparing infrastructure: Standardize and fortify enterprise systems for seamless, uninterrupted connectivity.
5
Strengthen cyber-safety: Reinforce defense barriers and threat detection to completely avoid the threat of loss.
6
Access to skilled workforce: Bridge organizational talent deficits by acquiring experts and a skilled technical workforce.

3. Technologies for RegTech

RegTech is based on technologies such as Machine Learning, cloud computing, Big Data and Blockchain. Let us take a look at how RegTech organizations need those tools:

Fig. 2. Technologies for RegTech

Hub-and-Spoke Architectural Matrix of Core RegTech Capabilities

Cloud Computing
Artificial Intelligence
Big Data
Blockchain
RegTech Core
Machine Learning
Virtualisation
API Gateways
Data Mining & Analytics

3.1 Cloud Computing

RegTech firms use cloud computing to supply their goods or services utilizing Software as a Service model. These SaaS make it possible for corporations in maintaining regulation. Cloud computing decreases the premium for hardware and software and also helping data storage economical. It gives access to data within a fraction of seconds. Further, data is captured on the cloud that offers backup and disaster retrieval while cyber-attacks or human errors.

3.2 Machine Learning

In RegTech, Machine Learning (ML) plays a crucial role. RegTech uses ML to explore patterns through different datasets to select variations. Moreover, ML empowers to recognize frauds and advances the management of risk. These structures likewise can analyze financial reports and caution firms of tax issues (aiding firm regulatory compliance and evades fines), help firms conduct businesses globally. Some ML algorithms also uncover segments of an organization’s software program that need enhancements.

3.3 Blockchain

With the utilization of Blockchain, RegTech firms can ensure that financial instances are executed safely and instantly. Blockchain has a ton of projects within the RegTech business. For example, RegTech firms utilize Blockchain to program documents and data. Blockchain license RegTech firms to approve records, increment in secure DSC and assurance of data due to the Blockchain’s discrete nature.

3.4 Big Data

RegTech firms utilize cloud computing and analytics to discover hidden sequences, new tendencies, illegal clients, and dubious transactions – based on large datasets. RegTech firms have embraced big data implementation, by that means; it has gotten more straightforward to administer the data aggregately in a single storage.

4. Core Features of RegTech

Firms were using manual compliance method before RegTech developed advanced technology-driven tools and techniques. RegTech has increased the possibilities for value addition to the compliance industry. The following are the core features of RegTech:

4.1 Agile

To prepare relevant databases quickly, RegTech firms utilize citation, transformation and load techniques.

4.2 High Speed

To process data and generate review in real-time, RegTech takes the help of Big Data and Cognitive Analytics.

4.3 Integrity

SaaS model grants RegTech companies to easily consolidate solutions with Software system of the organization with the product arrangement of the firm they collaborate with.

4.4 Improved Analytics

RegTech companies intently rely upon the capacity of their preparedness for gathering, processing and analyzing large data that too continuously. They use cutting edge analytics systems to offer customers with appropriate data.

5. Categories of RegTech Services

The functional taxonomy of RegTech services spans five primary operational domains, each propelled by distinct distributions of underlying technological tools:

5.1 Compliance

RegTech firms assign tech-driven RPA (Robotic Process Automation), ML, NLP, Biometrics, Blockchain, AI and Big data. They use it to cut the cost, save firm from money laundering, reduce cyber risk, upgrade regulatory requirements, credit worthiness etc.

Fig. 3. Technologies Used by RegTech Compliance: Key RegTech for compliance management
AI / Machine Learning
37%
Cloud Computing
37%
ERP / Software / Web Platform
13%
Other Technologies
13%

5.2 Transaction Monitoring

RegTech firms also offer transaction monitoring. In 2017, only payment fraud distressed around 80% of companies. Effective monitoring of transactions is one of the dominant devices to reduce the deception, ultimately saving a huge amount for the firm.

“The big banks are looking into this area (transaction monitoring) because at the end of the day they want the process to be effective and efficient.”

Fig. 4. Technologies Used by RegTech Transaction Monitoring: Key RegTech to monitor transactions
Blockchain
36%
AI / Machine Learning
27%
Big Data
10%
Cloud Computing
9%
API Gateways
9%
ERP / Software / Web
9%

5.3 Regulatory Reporting

RegTech equips firms to noticeably lessen the time taken for making reports by the usage of AI and Cloud-based methods. These processes are machine-driven and hardly require a human touch so the possibility of the error is almost nullified. If such data is up to the mark – then bank authorities, stakeholder and customers’ can examine the financial position faster.

Fig. 5. Technologies Used for Regulatory Reporting: Automated report generation architecture
Cloud Computing
35%
API Gateways
19%
AI / Machine Learning
16%
Big Data
14%
ERP / Software / Web
13%
AI / NLP
3%

5.4 Risk Management

These are the methods used by RegTech uses to enhance Risk management:

  1. It gives custom-designed services with easy to understand model for risk identification;
  2. It traces identification theft, money theft and tracks suspicious transactions with ML and RPA;
  3. It gathers data from distinct bases.
Fig. 6. Key RegTech for Risk Management: Risk identification & analytics breakdown
Big Data
46%
AI / Machine Learning
13%
ERP / Software / Web
13%
Cloud Computing
13%
AI / RPA
8%
Other Technologies
7%

5.5 Identity Management and Control

RegTech firm uses KYC structure along with ML, AI and Biometrics to recognize the customers and the fraud. To give access to the right user for the right data is the main aim of identification and control. RegTech resolves this issue by a fast and exceptionally stable identification control system.

Fig. 7. Key RegTech for Identity Management and Control: Identity access & control architecture
AI / Machine Learning
27%
API Gateways
27%
Big Data
16%
Cloud Computing
8%
Blockchain
8%
ERP / Software / Web
8%
AI / RPA
3.8%
AI / NLP
3%

6. Conclusion

This paper draws attention to the main features of RegTech and the issues which can be solved by RegTech firms. It also gives some insights into the technologies used by RegTech. The benefit of RegTech is that it processes the compliance of financial data, which includes financial statements and by which it gives the risk exposure of any entity.

FinTech and RegTech confirmed its value by using improved products and services and reducing costs. In the coming years, we will see which incumbents stay ahead of the curve and which tech companies overcome hurdles to become big players in the space. In the digital age, where consumers face an abundance of choice, the best products will win out. The seven trends illustrated here will contribute to the development of those products and the proliferation of FinTech.

RegTech 3.0 forms a part of the transition from protective mode to reinvention. Financial firms need to consider RegTech as a part of their wider transformation approach and be clear about what they need to achieve.

Human-AI Symbiosis: Balancing Automation and Professional Oversight

“It’s crucial to note here that AI and RegTech are not expected to widely replace people. We are seeing early AI entries within the RegTech space, however, they’re supporting with lower-hanging fruit and repetitive tasks. AI is improving human tasks, making them extra powerful in their roles. From the start of the regulatory review to the end of the compliance process, AI must work carefully with people, improving activities and balancing the appropriate level of manual oversight.”

CA. Piyush H Mekhia
Member, The Institute of Chartered Accountants of India (ICAI)
Email: ca.mekhia@gmail.com • eboard@icai.in