By a Circular dated 7^th March 2023, the Central Bank of Nigeria (CBN) released the “Operational Guidelines for Open Banking in Nigeria” (‘the Guidelines’). The Guidelines set out rules for sharing the data/information of customers between participants in the open banking system. Although not defined in the Guidelines, open banking system may be defined as the exchange of the data of an entity’s customers with other entities for the purpose of providing innovative financial services. Thus, the Guidelines recognize the right of customers to privacy and data protection and set out the rules for engaging in open banking in Nigeria. It among other things, stipulates technical requirements/considerations for operating in the open banking system, identifies the risks associated with open banking to include cyber security, data privacy and integrity, product management, money laundering and regulatory compliance, and outlines the rules to manage these risks.

In this article, we highlight some salient provisions of the Guidelines such as who the participants in open banking are, the obligations of participants, regulatory oversight functions, policies/frameworks to be formulated by participants, reporting obligations, intellectual property issues and risk management.

Participants in Open Banking Operations

These are the organizations/persons who may engage in the exchange of customers’ data for the purpose of providing/receiving innovative financial services. Participants in open banking are classified based on the roles and the services they provide as follows:

1. API Providers;
2. API Customers; and
3. Customers.

API providers (APs) are those who use Application Programming Interface (API) to avail data or service to another participant. They can be licensed financial institutions, fast-moving consumer goods (FMCG) companies such as cosmetics, beverages, drugs, etc. companies, retailers, payroll service bureau, etc.

API Customers (ACs) are those that use API released by APs to access data or service. They are the recipients of API containing the data or service of other customers.

Customers as participants are the data owners who shall be required to provide consent for the release of their data for the purpose of accessing financial services. They may provide consent whilst filling out a form, etc.

Open Banking Registry

By the Guidelines the CBN is expected to maintain and provide an Open Banking Registry (‘the Registry’). The Registry is charged with regulatory oversight functions for participants in open banking. Participants in open banking are required to be registered with the Registry and their details are to be held by the Registry. The Registry is also to maintain an API interface which would serve as the primary means by which API providers manage the registration of their API customers.

Responsibilities of API Providers and API Consumers

The Guidelines set out several responsibilities which APs and ACs are expected to comply with. These responsibilities provide rules for ensuring accessibility of open banking systems and procedures, transparency, cybersecurity, privacy protection, etc.  Some of these responsibilities are:

1. Configuration management: APs and ACs are required to keep detailed inventory of open banking system configuration items in accordance with current Information Technology Infrastructure Library (ITIL) Standards. They are also to have automated configuration management (CM) processes and a configuration management policy.
2. Execution of a Service Level Agreement (SLA): They are required to execute an SLA which is to contain provisions on accounting and settlement, fee structure, reconciliation of bills, registration, and sponsorship responsibilities. The fee structure is also to be publicly disclosed on their websites and applications.
3. They are to ensure that all systems required for open banking are available, functioning optimally and meet up with the minimum standards on service monitoring, incident management, performance monitoring and event logging.
4. They are to ensure that they meet the minimum performance standards for open banking systems. The Guidelines outlines several key performance indicators (KPIs) to ascertain compliance with the minimum performance standards. One of such KPI is that where the average API total processing time is less than 3 seconds, it would be considered as ‘operational’, where it is less than or equal to 7 seconds, it would be considered as ‘suspect’, and where it is greater than 7 seconds, it would be considered as ‘critical’.
5. APs and ACs are required to maintain Business Continuity Plan (BCP) which are to among other things, indicate the architecture of the Online Transaction Processing (OLTP) and Online Analytical Processing (OLAP) infrastructure, trigger events, processes for failover and fail-back, and includes quarterly failover exercises and review of processes. The Guidelines also sets the threshold for failover and fail-back procedures as ’30 minutes of downtime’. They are also required to implement Disaster Recovery Plans (DRP) which may also be entrenched in the BCP. The plans are to be tested every 6 months. Whilst CBN is to oversee testing procedures, it is the responsibility of ACs and APs to provide the facilities for testing.
6. They are to ensure that they have problem management systems in place. The problem management system is aimed at managing incidents known to be recurring and which are not resolved under the SLAs. APs and ACs are to maintain a Problem Register which is to be made available to regulators, auditors, risk, and control teams within the organization. The problem management system is to be always electronic, or cloud based.
7. They are to ensure compliance with interface requirements. Some of these requirements are ensuring that interfaces between APs and ACs are 100% electronic, the data interchange format must be JavaScript Object Notation (JSON) and ensuring that the data standard for financial transactions are model based on ISO 20022 or any other global applicable minimum standard.
8. ACs and APs are to ensure that they maintain best competition practices. They are to comply with the provisions of section 2 of the Code of Conduct for the Nigerian Banking Industry which guards against unethical practices/unprofessional conducts by persons in the banking industry.
9. They are to ensure that the data in their possession is well protected and are to set up effective information security management systems and are to ensure compliance with technical security standards and minimum-security principles as contained in US NIST CSRC.
10. Change management obligations. They are required to collate change requirements and plan the changes for the next month. Changes to be made, whether pre-emptive or responsive are to be reported with sufficient details and in accordance with the prescribed notifications to be sent to all stakeholders that may be affected by such changes. The notifications are to be made in the following order:

• 24 hours before the intended change
• 1 hour before the intended change.
• Immediately the change has been completed and the services have been confirmed restored.
• 30 minutes after the change should have been completed but has been prolonged or failed.
• At the point of commencing a change rollback.
• When the services have been restored.

11. APs and ACs are required to have secure real-time communication platforms for first level incident responders within their organizations and respective ACs/APs for incident notification, investigation, and resolution. Emails are however not sufficient communication channels for incident management in open banking. The communication platforms are to accommodate text voice and video conferencing as effective modes of communication.

Termination of Agreement between Participants.

Any participant desirous of terminating a relationship is required to give the other party 20 business days’ notice of such termination. Where the relationship is terminated without notice due to fraud, abuse of service, etc. the AP is required to provide the AC with a report justifying the termination within 2 business days.

Policies/Frameworks to be Formulated under the Guidelines

ACs and APs are required to formulate the following policies:

1. Data Governance Policies. These policies are to govern the way APs and ACs handle the data of customers. They are to be approved by a committee of its Board of Directors or at minimum, an executive management committee.
2. Data Ethics Framework. The Data Ethics Framework is to provide the principles for collecting, collating, storing, analyzing, processing, etc. data. The Framework is also to provide consistent procedures for the documentation, verification, etc. of data to ensure compliance with extant laws and regulations.
3. Data Breach Policy. This policy is aimed at preventing, managing, assessing, reviewing, etc. data breach.
4. Configuration Management Policy. This Policy is to be approved by the AP’s or AC’s executive or board level information technology steering committee or an equivalent body not less than executive level.
5. Risk Management Framework. This Framework is to set out guiding principles for the management and mitigation of risks. Participants are to have a risk management committee which is to consist of at least three members of senior management cadre.

Rendition of Returns/Reporting Obligations

One of the ways CBN safeguards the privacy rights of customers and ensure data security under the Guidelines is by mandating ACs and APs to render periodic returns to the CBN. The returns are to state the volume and value of transactions, the number of users, success and failure rates, security and fraud incidents, downtime reports and any other information as CBN may require from time to time.

Participants are also required to introduce an incident reporting portal to enable easy, efficient, and fast reporting of cybersecurity breach incidents.

ACs and Aps are to provide monthly API Consumers Reports to each other indicating among other things, statistics of incidents/problems, SLA compliance and aggregate impact in downtime or loss of service, the number and category of Fraud and Disputes with accompanying SLA performance, and the excerpts of the problem register indicating new, existing, and resolved problems.

ACs and APs are also required to make ‘Customer Reports’ to customers who have subscribed to one or more ACs stating among other things, transcript of ACs activities on the use of customer-permissioned data shall be provided to the customers at the minimum every month or for a period less than a month as may be requested by a customer, a transcript of each AC’s activities against the customer’s account/wallet for at least the last 30 days, etc.

Data Sharing

The Data of individuals is an intangible yet sensitive asset. The Guidelines provide for rules for data sharing with other (outsourced) service providers as well as between APs and ACs. Before APs share the data of a customer with ACs, they are to obtain the consent of the customer and authenticate the consent to ensure it emanates from the customer. This is to be done by putting in place Two Factor Authentication (2FA). The AC on the other hand is also required to furnish the customer with certain information such as its legal name, CAC registration number, means of identification in the open banking registry, access type and duration, means of withdrawal of consent, etc. for the consent obtained to be valid.

Intellectual Property

The Guidelines make provisions on IP issues and stipulates that the IP rights in any data or other information would always remain with the participant/party whom such data emanated from. Thus, parties are to be mindful of this provision while drawing up Agreements to ensure that no clause runs contrary to this stipulation.

Resolution of Complaints

By the Guidelines, participants are to stipulate how customers can lodge their complaints during the customer’s onboarding. Where there is a complaint, participants are required to acknowledge receipt of the complaint within 24 hours and are to resolve the complaint within 48 hours of its receipt.

Conclusion

It is important to emphasize that the Guidelines only applies to the exchange of data for the purpose of providing innovative financial services in Nigeria. Any organization that controls the data of its customers is now allowed to exchange it with other entities for the purpose of providing innovative financial services in Nigeria. However, before the information of customers are shared, their consents must be obtained, authenticated by API provider, and validated by the API customer. The Guidelines provides minimum security measures and risk management systems to be put in place to protect the information of customers. It sets out rules that would guard against the violation of the privacy rights of customers while promoting efficiency, financial inclusion, healthy competition, and customers’ access to services available to them in the financial service industry.

Please note that the contents of this article are for general guidance on the Subject Matter. It is NOT legal advice.

For further information or to see our other service offerings, please visit www.goldsmithsllp.com  or contact:

The post An Overview of CBN’s Operational Guidelines for Open Banking in Nigeria first appeared on Goldsmiths Solicitors.

The protection of IP in Nigeria is mostly governed by the Trademark Act, and the Patents and Designs Act and the agency responsible is the Trademarks, Patents and Designs Registry of the Federal Ministry of Trade & Investment.

Nature of Intellectual Property

According to World Intellectual Property Organisation (WIPO), Intellectual Property (IP) refers to creations of the mind, such as inventions; literary and artistic works; designs; and symbols, names and images used in commerce.[i]

A person’s Intellectual Property may be protected as a patent, copyright or a trademark. Patent protects your inventions such as when you invent something innovative i.e. a new software e.g.  ChatGPT. Trademark protects the name, logo and symbols pertaining to your products or brand. Copyright protects your original works such as literary, musical, dramatic and artistic works, sound recordings, broadcasts including songs, movies, published articles, computer programmes, novels, etc. Patent and trademark must be registered before they can be protected from infringement or unauthorised use in Nigeria. Even though copyright can be registered in Nigeria, registration is not mandatory as original works are automatically protected when they are reduced into a definite form of expression from which it can be perceived, reproduced or communicated directly or with the aid of any machine or device.[ii]

The Benefits of Protecting your Intellectual Property

Intellectual property are assets and as a result they can be stolen, copied, adapted, and infringed upon in any possible way if not properly protected under the appropriate system created for their protection. The infringement would also not be redressable if the intellectual property is not protected.  A well protected intellectual property guarantees the owner the following benefits:

1. It protects your creativity as the author of the work. Protecting your intellectual property ensures that your creativity is not taken advantage of without your authorization, thus leading to loss of patronage from customer and loss of revenue.
2. IP protections gives you a right to the exclusive use of your intellectual property. Any unauthorised use by any other person is an infringement that gives you the right to proceed against them to stop the unauthorised use and claim damages.
3. Protecting your intellectual property protects your brand against reputational damage. Your intellectual property such as your brand name and logo distinguish your business and set it apart from your competitors. If your intellectual property is not protected, counterfeit goods could be sold or poor services delivered with your brand name and logo which would affect the reputation and overall goodwill of your business.
4. It is a source of revenue or income. IP helps you to make money when you license, sell, or commercialize your creations or inventions.
5. IP can be used as a security for example whilst raising funds for your business. For instance, patents of an invention can be used as a collateral for securing loan.

How to Protect your IP in Nigeria

It is very important that you take adequate measures to ensure you do not disclose your IP to anyone before they are fully registered . Your IP can be protected by registering it with the Trademarks, Patents and Designs Registry, and Nigerian Copyright Commission (NCC). For start-ups seeking investors, this should be done even before pitching your idea to any investor. Disclosure of your IP before registration could prejudice or affect your right over the IP if someone registers it before you. Most IP for example trademark and patent operates on the basis of “first to file” principle. Also ensure that your works that are eligible for copyright protection should be fixed in a definite form of expression before passing it to any other person.

Remedies for Breach of IP

The owner of an IP can seek available remedies in the court having jurisdiction where his IP has been infringed. The remedies available include:

1. Damages or account of profits. Damages could be awarded to compensate for the loss suffered as a result of the infringement. Alternatively, an account of profit could be ordered to enable the IP owner to recover all the profits made by the infringer from the unauthorised use of the IP.
2. This remedy operates to stop the infringer from continuing the unauthorised exploitation of the IP.
3. Delivery up for destruction. The court could make an order mandating the infringer to deliver up the infringing products and the devices used in making them for destruction.

Conclusion

Intellectual Property is an important asset, and its value can only be fully realized and enjoyed only when fully protected. Nigeria has proven to be a major global hub for innovations in tech, music, movies, etc. It is very important that you take adequate measures to ensure you do not disclose your IP to anyone before they are fully registered. Start-ups have to be particularly careful with the IP before pitching for investors. In the event that a protected IP is infringed, there are remedies available to the IP to the owner in the form of damages, injunction and destruction of the infringing products.

[i] https://www.wipo.int/about-ip/en/ accessed on 17/11/2021

[ii] Section 1 (2) (b) of the Nigerian Copyright Act LFN 2004

Please note that the contents of this article are for general guidance on the Subject Matter. It is NOT legal advice.

For further information or to see our other service offerings, please visit www.goldsmithsllp.com  or contact:

The post The Benefits of Protecting your Intellectual Property in Nigeria first appeared on Goldsmiths Solicitors.

This article provides an insight into the provisions of the Guidelines.

What is Contactless Payment?

According to the Guidelines, contactless payment is a payment system that involves the use of contactless technology that enables an alternative payments method whereby payment instruments such as pre-paid, debit and credit cards, stickers, fobs, wearable devices, tokens and mobile electronic devices are used without physical contact with devices.

Aims of the Guidelines

The guidelines aim to provide the minimum standards and requirements for the operations of contactless  payments in Nigeria, and also specify the roles and responsibilities of the stakeholders involved in contactless payments in Nigeria.

Who are the Participating Stakeholders?

The participating stakeholders in contactless payments in Nigeria are:

1. Acquirers
2. Issuers
3. Payment Schemes
4. Card Schemes
5. Switching Companies
6. Payments Terminal Service Providers (PTSPs)
7. Payments Terminal Service Aggregator (PTSA)
8. Merchants
9. Terminal Owners
10. Customers
11. Any other stakeholder/participant(s) as may be designated by the CBN.

The stakeholders are required to obtain CBN’s approval for contactless payments products and for innovative use cases and value-added services.

Minimum Standards for Contactless Payments in Nigeria

The participating stakeholders that process and/or store customers’ information are obliged to ensure that their terminals, applications and processing systems comply with the below standards at the minimum:

1. PA DSS – Payment Application Data Security Standard
2. PCI PED – Payment Card Industry Pin Entry Device
3. PCI DSS – Payment Card Industry Data Security Standard
4. Triple DES – Data Encryption Standards shall be the benchmark for all data transmitted and authenticated between each party. The Triple DES algorithm is the minimum standard.
5. AES – Advanced Encryption Standards
6. EMV – the deployed infrastructure must comply with the minimum EMV requirements for Contactless acceptance
7. ISO27001 – Information Security Management System
8. Other standards as may be specified by CBN from time to time.

Each participating stakeholder (operator) is mandatorily required to maintain valid certification to the above standards and regularly review the status of its systems, applications, networks and devices, to ensure they remain compliant.

Roles and Responsibilities of Stakeholders

The Guidelines provide for the separate roles and responsibilities of the stakeholders as follows:

Acquirers

Some of the roles and responsibilities of acquirers with respect to contactless payments in Nigeria include:

1. Only CBN licensed institutions can serve as acquirers for contactless payments.
2. Acquirers shall ensure that their applications, instruments, tokens and devices meet current standards and specifications for contactless payments.
3. Acquirers shall execute contactless payments agreements with parties for utilizing contactless platforms for payments.
4. Acquirers shall be able to accept all cards or payments instruments used in Nigeria.

Issuers

Some of the roles and responsibilities of Issuers with respect to contactless payments in Nigeria include:

1. Only CBN licensed institutions shall serve as Issuers for contactless payments.
2. Issuers shall ensure that activation of contactless payment is at customer’s instance, and with full consent.
3. Issuers shall ensure that their applications, instruments, tokens and devices meet current standards and specifications for contactless payments.
4. Issuers shall activate only accounts and wallets with Bank Verification Number (BVN).
5. Issuers shall ensure that transaction limits are strictly adhered to.

Payment Schemes and Card Schemes

Payment Schemes and Card schemes have the same roles and responsibilities with respect to contactless payments in Nigeria. These roles and responsibilities include:

1. Ensuring that all contactless transactions are processed online or submitted via current processing specifications.
2. Implement a documented risk management process to identify and treat risks associated with contactless payments.

Switching Companies

Switching companies have the responsibility of ensuring that contactless transactions consummated by all payment instruments issued in Nigeria are successfully switched between acquirers and issuers.

Payment Terminal Service Providers (PTSPs)

Some of the roles and responsibilities of PTSPs with respect to contactless payments in Nigeria include:

1. Ensuring that all their terminals for contactless payments are functional at all times.
2. Ensure they have adequate support infrastructure that support coverage for merchants.
3. Ensure all deployed devices and terminals have support service contact information.
4. Prevent instrument clashes even when multiple contactless payments devices are present.

Payment Terminal Service Aggregator (PTSA)

The PTSA shall, on an annual basis, or more frequently, certify POS terminals for contactless payments to ensure POS terminals meet the approved standard for the industry and also put in place a risk management process.

Merchants

Some of the roles and responsibilities of merchants with respect to contactless payments in Nigeria include:

1. Ensuring that deployed devices and applications are available for contactless payments of goods and services.
2. Merchants shall be held liable for fraudulent contactless payments arising from negligence/connivance.
3. Contactless payment transaction value and associated charges shall be clearly communicated to the customer prior to consummation of the transaction.
4. Display the contactless symbol

Terminal Owners

Terminal owners are to ensure that all terminals and devices are compliant with appropriate minimum specifications and also ensure the implementation of a documented risk management process.

Customers

Customers have the option to opt-in by applying and consenting to applicable terms and conditions and can withdraw without prior notice to the issuer. Customers are also obliged to authenticate contactless payments transaction as may be required, exercise due diligence in carrying out contactless payments transactions and protect their payments instruments from unauthorized use.

Transaction Limit

The CBN is to determine the appropriate transaction and cumulative daily limits for contactless payments from time to time. However, stakeholders are permitted to set limits in line with CBN’s limits.

Contactless payment transactions below stipulated daily limits may not require customers’ authorization such as token, biometrics, pin, etc. while higher-value contactless payments shall require customer verification such as pin, mobile code, biometric, etc.

Sanctions and Penalties

Stakeholders are required to comply with the provisions of the Guidelines and other relevant regulations of the CBN. Failure to comply attract appropriate sanctions and penalties as may be determined by the CBN.

Conclusion

The Exposure Guidelines provides a regulatory framework for the activities and conduct of affairs of the stakeholders in the contactless payments system in Nigeria. When the Guidelines become operational, all stakeholders will be required to conduct their affairs and carry out their roles in accordance with the minimum set standards under the Guidelines.

Please note that the contents of this article are for general guidance on the Subject Matter. It is NOT legal advice.

For further information or to see our other service offerings, please visit www.goldsmithsllp.com  or contact:

The post An Overview of the Central Bank of Nigeria Exposure Draft Guidelines on Contactless Payments in Nigeria first appeared on Goldsmiths Solicitors.

What is Representative Office of a Foreign Bank?

Representative office of a foreign bank is defined as an approved Representative Office of a Foreign Bank in Nigeria acting as liaison office of the foreign bank licensed by the Central Bank of Nigeria, whose sole object is to market the products and services of its foreign parent as well as serve as liaison between its foreign parent and local banks, other financial institutions, private companies and the general public.

Scope and Applicability of the Guidelines

The Guidelines shall apply to the following institutions:

1. A bank licensed under any foreign law, whose registered office is outside Nigeria
2. Any financial institution licensed under foreign law, whose primary business includes the receipt of deposits, granting of loans and/or provision of current and savings accounts.
3. Any foreign-owned operating bank/financial holding company that is foreign-based, that owns controlling interest in one or more banks or institutions whose primary business includes the receipt of deposits, granting of loans and provision of current and savings accounts.

Permissible Activities of Approved Representative Offices

Representative offices of foreign banks in Nigeria can carry out the following activities in Nigeria:

1. Marketing the products and services of its foreign parent or an affiliate of the foreign parent licensed and domiciled outside Nigeria.
2. Carrying out research activities on behalf of the foreign parent.
3. Serving as liaison between the foreign parent and local banks, private institutions within Nigeria and other customers of the foreign parent based in Nigeria.
4. Connect banks and other financial institutions to its foreign parent.
5. Connect exporters in Nigeria with potential customers in jurisdictions where the parent company operates and assisting Nigerian exporters with finding new markets through its international offices, etc.

Non-permissible Activities of Approved Representative Offices

Representative offices of foreign banks in Nigeria are not allowed to carry out the following activities:

1. Provision of services designated in Nigeria as banking business.
2. Provision of any commercial or trading activity that may lead to the issuance of invoices for services rendered.
3. Acceptance of orders on behalf of the foreign parent.
4. Engage directly in any financial transaction except for transactions that are related to those permitted.

Licensing

The licensing of representative offices of foreign banks in Nigeria is done in two stages which are:

1. Approval-in-Principle (AIP); and
2. Final license or approval

The Requirements for Approval-in-Principle (AIP) of a Representative Office

Foreign banks and other financial institutions seeking to establish an approved representative office in Nigeria and obtain the approval-in-principle of the CBN shall submit a formal application to the Governor of the CBN and shall meet the requirements for approval-in-principle which include:

1. The home supervisory authority of the applicant bank or other financial institution must have a valid Memorandum of Understanding with the CBN.
2. No objection letter (or approval) from the home supervisory authority.
3. Evidence of payment of non-refundable application fee of N5,000,000 to the CBN.
4. Board resolution in support of the foreign parent’s decision to invest in the equity shares of the proposed representative office.
5. Evidence of name reservation with the Corporate Affairs Commission.
6. Detailed business plan or feasibility report
7. Schedule of services to be rendered
8. Sources of funding for the representative office’s operations and five years financial projection
9. Draft copy of the representative office’s Memorandum and Articles of Association
10. Draft Shareholders Agreement unless it is 100% owned by the foreign parent bank.

The Requirements for Final License or Approval of a Representative Office

The promoters of a proposed representative office in Nigeria are expected to apply for the grant of the final license to the CBN not later than three months after obtaining the approval-in-principle of the CBN. The requirements include:

1. Evidence of payment of non-refundable licensing fee of N10,000,000
2. Certified true copy of certificate of Incorporation of the business
3. Certified True Copy of Memorandum and Articles of Association
4. Certified True Copy of Form CAC 1.1
5. Evidence of location of the Office for the take-off of the business
6. Names, addresses and curricular vitae of Management staff
7. Schedule of changes, if any, in the Board and shareholding after the grant of the AIP.
8. Copies of letters of offer and acceptance of employment in respect of the management team.

The CBN will also conduct an inspection of the premises and facilities of the proposed representative as a requirement for the grant of final license.

Reporting Requirements of a Representative Office

A representative office has the following reporting requirements or obligations:

1. Informing the CBN forthwith of any incidents of fraud, theft or robbery.
2. Submitting a written confirmation by the Chief Representative that the Representative Office has complied with all the requirements in its approval document to the CBN.
3. Submitting a quarterly report which summarizes the activities undertaken by the representative office.
4. A certificate from a recognized audit firm affirming that during the year no income was earned or accrued to the Nigeria office. Such certificate shall be submitted not later than 28 February of each year.

Operational Requirements of a Representative Office

The operational requirements which apply to a representative office include:

1. A representative office shall use the parent’s name only in conjunction with the description “representative office” in its documents and correspondences, including office signage, letterheads and business cards.
2. A representative office shall inform the CBN of its proposed hours of business
3. No representative office shall be relocated or closed without the prior written approval of CBN
4. Notify the CBN in writing immediately or within seven days if there is any variation to the shareholding structure that changes the control and/or majority ownership in its parent foreign institutions.

Disclosure and Examination of a Representative Office

A representative office is obliged to display the following information in a conspicuous place on its premises:

1. The name, contact details and logo of the foreign bank it is representing
2. Its authorization to operate a representative office as issued by the CBN
3. An authenticated copy of the consent letter from the home country supervisory authority.
4. An authenticated copy of the foreign bank’s valid license to conduct banking business
5. A list of the services offered by the representative office.

The representative office is to be examined periodically and risk-based on issues which are not limited to the following:

1. A review of the activities conducted
2. A general assessment of its management and supervision
3. A review of whether the office is complying with applicable laws and regulations.

A brief examination report shall be prepared highlighting any significant supervisory concerns.

Conclusion

The Guidelines provide a clear regulatory overview to what representative offices are, the requirements for the licensing of a representative office in Nigeria, the activities that can be undertaken by a representative office while also highlighting the obligations that are to be met by the representative office. The Guidelines, when issued, will streamline the activities of representative offices whilst giving the CBN more regulatory overview of their activities.

The post An Overview of the Central Bank of Nigeria Exposure Draft Guidelines for the Regulation of Representative Offices of Foreign Banks in Nigeria first appeared on Goldsmiths Solicitors.

In this concluding part of our series examining the Petroleum Industry Act (PIA) 2021, we take a look at the provisions made for host communities under the Act. We also highlight funds established under the Act as well as other general provisions relating to customer protection, natural gas price for strategic sector, etc. in the Act. The Act makes provisions for host communities which encourages social and economic development and is aimed at promoting mutual cooperation between the host communities and petroleum operators within the community (Settlors).

Incorporation of Host Communities Development Trust

Host communities are communities situated in or appurtenant to the area of operation of a settlor and any other community as a settlor may determine.[1]

The settlor[2] is required to incorporate a Host Community Development Trust ‘the Trust’ in the community where they carry out petroleum operations.[3] The Settlor is also required to appoint the Board of Trustees (the Board) as well as members of each Committee in the said Trust. The failure of a settlor to do so can be a ground for revocation of License or Lease.[4] The settlor is also required to undertake a Needs Assessment which shall metamorphose into the Community Development Plan and determine the project to be undertaken by the Trust.

Timeline for Incorporating the Trust

The timeframe within which the Trust is to be incorporated by the settlors are as follows:

• The settlors with existing Oil Mining Lease, existing designated facilities and new designated facilities under construction – 12 months from the effective date;[5]
• Settlors with existing Oil Prospecting License – prior to the application for field development plan;
• Settlors with Petroleum Prospecting License and Petroleum Mining – prior to the application for any field development plan; and
• Settlors who are licensees of designated facilities granted under the PIA – prior to the Commencement of commercial operations.[6]

Reporting Obligations under the Trust

The Management Committee of the Trust (one of the Committees to be setup under the Trust) has both mid-year and annual reporting obligations to the Board of Trustees which is to be sent respectively not later than 31^st August of the preceding year and 28^th February of the succeeding year. The Board is also required to report to the Settlor not later than 31^st March of that year. The Board shall then submit an annual report to the Commission or Authority (as the case may be) not later than 31^st May each year.[7]

Funds under the Petroleum Industry Act

The Act makes provision for the establishment of various Funds. The Funds established or to be established would be used in administering the affairs of the sectors which they apply to.

The Host Communities Development Trust Fund – this Trust Fund is established by the  constitution of each Host Community Development Trust and the Settlors are required to make an annual contribution to the applicable community of 3% of its actual operating expenditure of the preceding year in the Upstream Petroleum Operation affecting the community.

The Act protects petroleum operations and activities in host communities by providing that where there is any vandalism, sabotage or any civil unrest which causes damage to any petroleum or designated facilities or disrupts petroleum activities in a host community, such community will forfeit its entitlement to the extent of the cause to repair the damage or the damage that occurred as a result of such disruption.[8]

The Decommissioning and Abandonment Fund (DAF) –

This Fund is to be setup, maintained and managed by each Licensee and Lessee to be held by a financial institution that has no connection with the Licensee and Lessee or its affiliate. It is to be held in an escrow account, accessible to the Commission or Authority. The Fund is to be used for the payment of decommissioning and abandonment costs.

The amount to be contributed yearly into the Fund is to be based on the Decommissioning and Abandonment Plan set out by the licensee or lessee and approved by the Commission or Authority  and the amount is to be reviewed every 10 years following the first submission.[9]

A Licensee or Lessee is required to inform the Commission or Authority (as the case may be) of the establishment of this Fund not more than 3 months from the date of commencing upstream petroleum operations or commissioning the facilities for midstream operations. They are also required to submit the Statement of Account of the said Fund to the Authority or Commission on an annual basis and a copy is to be provided to the FIRS. The residue amount in the Fund after the decommissioning and abandonment has been carried out and approved is to be taken as income for production sharing and tax purposes and the remaining amount shall be returned to the Licensee or Lessee after tax deductions.[10]

Midstream and Downstream Infrastructure Fund (MDIF) –

This Fund is established by the Act and is a body corporate capable of suing and being sued.[11] Its source of funds includes 0.5% of the wholesale price of petroleum products and natural gas sold in Nigeria to be collected by the wholesale customers and which is to be paid within 21 days of sale[12], funds and grants from multilateral agencies, bilateral institutions dedicated partly or wholly to midstream and downstream infrastructure in Nigeria, monies received from gas flaring penalties by the commission, etc.

The Fund is to be used to make equity investments of Government owned participating or shareholders interest in infrastructures relating to operations of the midstream and downstream sector.[13]

The Frontier Exploration Fund (FEF)[14] –

This Fund is created to facilitate petroleum exploration activities in Nigeria including drilling and testing of identifiable petroleum prospects and leads, the development of frontier acreages, exploration of frontier basin, etc.

The major source of fund for the FEF is 30% of the Nigerian National Petroleum Company Limited profit oil and profit gas in the production sharing, profit sharing and risk service contracts.

A commercial discovery made in a frontier acreage and the identifiable prospect or lead is tested and grilled by the Commission, the NNPC Limited will have the right of first refusal.

The Authority Fund[15] –

This Fund is to be used for the administration and operations of the affairs of the Nigerian Midstream and Downstream Petroleum Regulatory Authority. Its source of fund includes 0.5% of the wholesale price of petroleum products and natural gas sold in Nigeria to be collected from wholesale customers, fees charged by the Authority for services rendered to licensees, fees paid to the Authority, income derived from publications made by the Authority, etc.

The contribution of 0.5% of the wholesale price of petroleum products and natural gas sold in Nigeria to be collected from wholesale customers applicable to this Fund is distinct from the one to be made to the MDIF.

The Commission Fund[16]–

This Fund is to be used for the administration and operations of the affairs of the Nigerian Upstream Petroleum Regulatory Commission. its source of fund includes money appropriated by the National Assembly, fees charged by the Commission for services rendered, income derived from publications by the Commission, etc.

The post Host Communities and Funds under the Petroleum Industry Act 2021- Goldsmiths Solicitors PIA Series IV first appeared on Goldsmiths Solicitors.

The Petroleum Industry Act (the PIA) was signed into law by Nigerian President, Muhammadu Buhari on 16 August 2021. Before its passage into law, it was a Bill pending for over 20 years at the National Assembly. Its passage represents a breakthrough for the petroleum industry in Nigeria with its innovative provisions and is aimed at repositioning the sector and meeting international best practices.

The PIA marks the beginning of the end of the Nigerian National Petroleum Corporation (NNPC) which was established on 1 April 1977. It provides for the incorporation of a National Oil Company – Nigerian National Petroleum Company Limited (NNPC Ltd.) which will eventually be vested with the responsibility of winding down the NNPC and taking over its operations.

For further information or to see our other service offerings, please visitwww.goldsmithsllp.comor contact us.

The post The Petroleum Industry Act, 2021 – Goldsmiths Solicitors PIA Series 1 first appeared on Goldsmiths Solicitors.