AU AU Authorisation
AU-A AU-A Introduction
AU-A.1 AU-A.1 Purpose
Executive Summary
AU-A.1.1
The Authorisation Module sets out the Central Bank of Bahrain's (CBB) approach to licensing providers of
regulated investment services in the Kingdom of Bahrain. It also sets out CBB requirements for approving persons in those providers.Amended: January 2011
Amended: July 2007AU-A.1.2
Persons who provide any of the following
regulated investment services within or from the Kingdom of Bahrain, and are not otherwise licensed by CBB as a bank, are required to be licensed by CBB as aninvestment firm licensee :a) Dealing infinancial instruments as principal;b) Dealing infinancial instruments as agent;c) Arranging deals infinancial instruments ;d) Managingfinancial instruments ;e) Safeguardingfinancial instruments (i.e. acustodian );f) Advising onfinancial instruments ; andg) Operating acollective investment undertaking (i.e. anoperator )Amended: July 2007AU-A.1.3
Four categories of
investment firm license are provided for under the CBB Rulebook, depending on the type ofregulated investment services undertaken. The requirements in Volume 4 (Investment Business) are tailored in certain respects, according to the license category concerned, in order to address the specific features and risks associated with each type ofregulated investment service .Amended: January 2022
Amended: July 2007AU-A.1.4
Collectively, licensed providers of
regulated investment services are calledinvestment firm licensees . Bahrain-incorporatedinvestment firm licensees are calledBahraini investment firm licensees .Investment firm licensees that are incorporated in an overseas jurisdiction and operate via a branch presence in the Kingdom of Bahrain are calledoverseas investment firm licensees . The same naming convention applies to the various sub-categories of investment firms (e.g.Bahraini Category 1 investment firm ,overseas Category 1 investment firm etc).Amended: July 2007AU-A.1.5
Regulated investment services are defined in Section AU-1.4. Their definition excludes operating a recognised exchange (such as the Bahrain Bourse) and related infrastructure (such as central clearing and depository systems). These activities are separately addressed, in the form of individual regulations issued by the CBB's Capital Markets Supervision Directorate, and the Bahrain Bourse.Amended: January 2022
Amended: July 2007AU-A.1.6
Persons undertaking certain functions in relation to
investment firm licensees require prior CBB approval. These functions (called 'controlled functions ') includeDirectors and members of senior management. Thecontrolled functions regime supplements the licensing regime by ensuring that key persons involved in the running ofinvestment firm licensees are fit and proper. Those authorised by the CBB to undertakecontrolled functions are calledapproved persons .Amended: July 2007Retaining Authorised Status
Representative Offices and Ancillary Services Providers
AU-A.1.8
Neither
representative offices of foreign investment firms, norancillary services providers , are covered in Volume 4 (Investment Business). Requirements covering these types of activities will instead be included in Volume 5.Amended: July 2007AU-A.1.9
Volume 5 (Specialised Activities) of the CBB Rulebook issued in December 2010 deals with
representative offices of foreign investment firms.Amended: October 2011
Amended: July 2007AU-A.1.10
[This Paragraph has been deleted in January 2022].
Deleted: January 2022
Amended: July 2007Legal Basis
AU-A.1.11
This Module contains the CBB's Directive, Regulation and Resolutions (as amended from time to time) regarding authorisation under Volume 4 of the CBB Rulebook. It is applicable to all
investment firm licensees (as well as toapproved persons ), and is issued under the powers available to the CBB under Articles 37 to 42, 44 to 48 and 180 of the Central Bank of Bahrain and Financial Institutions Law 2006 ('CBB Law'). It includes the requirements contained in Resolution No (1) of 2007 with respect to determining fees categories due for licensees and services provided by the CBB. The Module also contains requirements under Regulation No (1) of 2007 pertaining to the CBB's regulated services issued under Article 39 of the CBB Law and contains requirements governing the conditions of granting a license for the provision of regulated services as prescribed under Resolution No. (43) of 2011 and issued under the powers available to the CBB under Article 44(c). The Module contains requirements under Resolution No.(16) for the year 2012 including the prohibition of marketing financial services pursuant to Article 42 of the CBB Law. This Module contains the prior approval requirements for approved persons under Resolution No (23) of 2015.Amended: July 2015
Amended: January 2013
Amended: October 2011
Amended: January 2011
Adopted: July 2007AU-A.1.12
For an explanation of the CBB's rule-making powers and different regulatory instruments, see Section UG-1.1.
Adopted: July 2007AU-A.1.2
The Module builds on the legal requirements contained in Legislative Decree No. 23 of 1973, with respect to financial and investment organisations ("the BMA Law 1973"). The Module is issued under legal powers granted to the BMA by the BMA Law 1973, contained in articles 14(d), 14(g) and 41.
Licensing
Approved Persons
Registered Administrators
AU-A.1.8
Persons carrying on the business of an administrator require prior registration by the BMA. Administrators are persons who administer financial instruments and related services such as cash/collateral management. They must satisfy certain basic conditions in order to be registered, following which they are subject to only a few on-going requirements. Unlike licensees,
registered administrators are not subject to detailed on-going supervision or extensive regulation. Those authorised by the BMA to carry on administration services are calledregistered administrators .AU-A.2 AU-A.2 Module History
Evolution of Module
AU-A.2.1
This Module was first issued in April 2006, as part of the first phase of Volume 4 (Investment Business) to be released. It is dated April 2006. Any material changes that have subsequently been made to this Module are annotated with the calendar quarter date in which the change was made: Chapter UG-3 provides further details on Rulebook maintenance and version control.
Amended: July 2007AU-A.2.2
When the CBB replaced the BMA in September 2006, the provisions of this Module remained in force. Volume 4 was updated in July 2007 to reflect the switch to the CBB, as well as other policy changes. However, new calendar quarter dates were only issued where these involved changes in the substance of Rules.
Adopted: July 2007AU-A.2.3
A list of recent changes made to this Module is provided below:
Module Ref. Change Date Description of Changes AU-A.1.3 07/2006 Deletion of reference to 'acting as a trust service provider'. AU-1.1.13 07/2006 Deletion of reference to 'acting as a trust service provider'. AU-1.1.14 07/2006 Clarification of scope of exemption. AU-1.4.50 07/2006 Deletion of paragraph relating to 'acting as a trust service provider'. AU-1.4.51 07/2006 Deletion of paragraph relating to 'acting as a trust service provider'. AU-A.1 07/2007 Changes to reflect new CBB Law and reclassification of administrators asancillary services providers (i.e.licensees , to be subject to Volume 5 of the CBB Rulebook).AU-1.3 07/2007 Deletion of this Section to reflect reclassification of administrators asancillary services providers (i.e.licensees , to be subject to Volume 5 of the CBB Rulebook).AU-1.4 07/2007 Clarification of exemption in Rule AU-1.4.8; and minor change to definition of collective investment undertaking (to align with new Module CIU, Volume 6).AU-4 07/2007 Chapter deleted to reflect reclassification of administrators asancillary services providers (i.e.licensees , to be subject to Volume 5 of the CBB Rulebook).AU-5.1 07/2007 Section amended to reflect new procedures reflecting CBB Law. AU-5.3 07/2007 Deleted following reclassification of administrators asancillary services providers (i.e.licensees , to be subject to Volume 5 of the CBB Rulebook).AU-5.4 07/2007 Amended to reflect new CBB Law procedures. AU-5.5 07/2007 Amended to reflect new CBB Law procedures. AU-6 07/2007 New Chapter AU-6 on application and license fees (old material on fees, previously contained in Module GR, deleted). AU-5.1.5 and 5.1.5A 01/2008 Clarified CBB's requirements for letters of comfort and/or letters of guarantee. AU-5.1.13 01/2008 Clarified CBB's requirements for items that must be in place within 6 months of a new license being issued. AU-1.1.18 04/2008 Clarified that Category 3 investment firms must be independent.AU-5.2.2 04/2008 Clarified to whom Form 3 should be sent to if dealing with a request for an appointment of MLRO from an existing investment firm licensee. AU-5.5.5 04/2008 Outlined CBB's requirements in instances where a controlled function becomes vacant. AU-5.2.5 07/2008 Clarified that the refusal decision by the CBB to grant a person 'approved person' status is issued to the investment firm licensee AU-5.2.6 07/2008 Added cross reference. AU-1.1.18 10/2009 Clarified that Category 3 investment firms must refrain from receiving fees or commissions from parties other than clients. AU-1.1.24 10/2009 Paragraph changed from Guidance to Rule. AU-1.2 10/2009 Amended to reflect requirements of Modules HC and RM. AU-1.2.2 10/2009 Controlled function of Deputy MLRO added. AU-1.2.15 10/2009 New Rule added to clarify definition of Compliance Officer and MLRO/Deputy MLRO. AU-1.4.11 10/2009 Clarified that dealing in financial instruments as principal includes underwriting and private placement. AU-1.4.19 10/2009 Clarified that dealing in financial instruments as agent does not include execution of deals. AU-2.3 10/2009 Updated to include CBB's requirements for controllers. AU-5.1.5 10/2009 Clarified that copy of commercial registration certificate is required for existing Bahraini companies only. AU-5.2 10/2009 Updated to include CBB's information requirements for the appointment of approved persons. AU-B.1.3, AU-2.5.2 and AU-2.7.2 07/2010 Paragraphs deleted. AU-B.2 and AU-5.5.5 07/2010 Amended heading. AU-1.2.9 and AU-5.5.1 07/2010 Added cross reference. AU-1.4.33 and AU-1.4.37 07/2010 Paragraphs changed from Guidance to Rules and amended to clarify definition of safeguarding financial instruments. AU-1.4.42 and AU-1.4.43 07/2010 New rules added to clarify definition of advising on financial instruments. AU-1.4.49, AU-1.4.50, AU-1.4.51 and AU-5.5.5 07/2010 Amended cross reference. AU-1.2.9, AU-1.4.49, AU-1.4.50, AU-1.4.51, AU-2.3.5, AU-5.1.6, AU-5.1.12A, AU-5.1.12B, AU-5.1.12D and AU-6.1.1 07/2010 Paragraphs amended. AU-5.1.5A 07/2010 Paragraphs amended and changed to Rule. AU-5.1.12K 07/2010 Paragraph added to require confirmation that capital has been paid in before the final approval for a license. AU-5.1.13 07/2010 Updated to include new requirement to be submitted within six months of the license being issued. AU-6.2 07/2010 Updated to include CBB's annual license fee requirements. AU-A.1.11 01/2011 Clarified legal basis. AU-1.1.2 01/2011 Clarified guidance. AU-1.1.21, AU-1.1.22 and AU-1.2.1(f) 01/2011 Paragraphs deleted for consistency in CBB Rulebook. AU-1.2 01/2011 Amended as requirements moved from Module HC to Module AU. AU-1.4.25 01/2011 Amended guidance to reflect new definitions related to licensed exchange(s). AU-5.1.13(j) 01/2011 Added language requirements for commercial registration certificate. AU-5.1.5A 01/2011 Amended CBB's requirements concerning letters of guarantee to be submitted with licensing application. AU-5.1.13 01/2011 Added requirement to submit copy of licensee's business card and any written communication including a statement that the investment firm is licensed by the CBB. AU-5.5.3 01/2011 Clarified guidance. AU-1.2.16 04/2011 Added a definition Paragraph for the compliance officer. AU-5.1.5(m) 04/2011 Corrected typo and added clarification to requirements dealing with private placements. AU-6.2.9A 04/2011 Added the requirement for annual fees for SPV's to be in line with the requirements of Resolution No (1) of 2007. AU-A.1.9 10/2011 Guidance Paragraph amended as Volume 5_Representative Offices was issued in December 2010. AU-A.1.11 10/2011 Legal basis updated to reflect all Articles of the CBB Law covered by this Module as well as applicable Resolutions. AU-5.5 10/2011 Clarified language on cancellation of a license to be in line with other Volumes of the CBB Rulebook. AU-1.1.14, AU-1.4.11A and AU-1.4.11B 01/2012 Guidance in AU-1.1.14 amended and changed to Rule and moved to AU-1.4.11A and additional guidance added as AU-1.4.11B. AU-1.4.19 and AU-1.4.19A 01/2012 Clarified Rule AU-1.4.19 and added guidance for Category 3 investment firms. AU-1.4.33 01/2012 Added reference to Volume 5 (Administrators) and amended Rule. AU-2.2.2 and AU-2.2.3 01/2012 Restructured and amended guidance into two Paragraphs, including one guidance and one Rule. AU-2.3.2 01/2012 Clarified application of Rule for Category 1 and 2 investment firm licensees. AU-5.5.5 01/2012 Clarified Rule. AU-6.2.9B 01/2012 Guidance added to clarify the non application of fees for SPVs established for the purpose of setting up a locally domiciled CIU. AU-1.2.13, AU-1.2.13A and AU-1.2.13B 07/2012 Clarified Rule and added Paragraphs on investment consultant and investment adviser. AU-1.4.2 and AU-5.5.4A 10/2012 Corrected cross reference. AU-1.1.25, AU-1.2.13, AU-1.4.11, AU-1.4.11A, AU-1.4.15, AU-1.4.17., AU-1.4.18, AU-1.4.28, AU-1.4.29, AU-1.4.41 and AU-1.4.45 10/2012 The term 'underwrite/underwriting' has now been defined and included in the Glossary under Part B of Volume 4. AU-1.4.15 10/2012 Clarified Rule dealing with providing credit. AU-1.4.52 10/2012 Reference updated to reflect the issuance of Volume 7 (CIU). AU-A.1.11 01/2013 Updated legal basis. AU-B.1.1 01/2013 Updated prohibition as per issuance of Resolution No.(16) for the year 2012. AU-1.1 01/2013 References added to requirements under Resolution No.(16) for the year 2012. AU-1.1.24 04/2013 Added cross reference. AU-6.2 07/2013 Amended due date and collection process for annual license fees. AU-1.1.24, AU-1.1.24A and AU-1.1.24B 10/2014 Amended requirements to have a Shari'a Supervisory Board based on the category of investment firm licensee. AU-1.4.11 and AU-1.4.11B 10/2014 Clarified the meaning of dealing in financial instruments as a principal and added cross reference to approval from CBB's Capital market Supervision Directorate as well as requirements under Module OFS of Volume 6 of the CBB Rulebook. AU-5.1.7A 10/2014 Clarified that any PPM issued to raise capital must comply with module OFS and is subject to the CBB's Capital Market Supervision Directorate's prior approval. AU-A.1.11 07/2015 Legal basis updated to reflect Resolution No (23) of 2015. AU-3.2.1 07/2015 Added cross reference to Module TC. AU-5.2 07/2015 Amended to be in line with Resolution No (23) of 2015 on Prior Approval Requirements for Approved Persons. AU-5.5.5 07/2015 Clarified interim arrangements for replacement of approved person. AU-1.2 01/2016 Clarified general requirements for approved persons. AU-3 01/2016 Amended to be in line with Resolution No (23) of 2015 on Prior Approval Requirements for Approved Persons. AU-5.1.4 01/2016 Paragraph deleted as no longer applicable. AU-5.2 01/2016 Minor amendments to be aligned with other Volumes of the CBB Rulebook. AU-1.1.18 10/2016 Added subparagraph (d) AU-1.1.18A 10/2016 Changed 'not limited' to 'in relation' AU-1.1.18B 10/2016 Deleted subparagraph (f) AU-5.2.3 10/2016 Added to Rule new subparagraph (e) AU-5.6 07/2017 Added new Section on Publication of the Decision to Grant, Cancel or Amend a License AU-1.2.2 04/2018 Amended Paragraph AU-5.1.1 04/2018 Amended Paragraph AU-5.1.12E 04/2018 Amended Paragraph AU-5.2.2 04/2018 Amended Paragraph AU-1.4.41A 04/2019 Added a new Paragraph on digital investment advice. AU-1.2.7 07/2019 Amended definition of a Director. AU-1.4.33 07/2019 Amended Paragraph. AU-5.1.1 07/2019 Amended Paragraph to remove references to hardcopy Form 1 submission to online submission. AU-5.1.12H 10/2019 Changed from Rule to Guideline. AU-5.1.12I 10/2019 Changed from Rule to Guideline. AU-5.1.12J 10/2019 Changed from Rule to Guideline. AU-5.6.1 10/2019 Changed from Rule to Guideline. AU-1.1.13 07/2020 Added new sub-paragraph (ff). AU-1.1.17 07/2020 Added new sub-paragraph (c). AU-1.1.22A, AU-1.1.22B, AU-1.1.22C 07/2020 Added new Paragraphs on Arranging Credit and Advising on Credit suitability. AU-1.4.43 07/2020 Deleted Paragraph. AU-1.4.47A, AU-1.4.47B, AU-1.4.47C, AU-1.4.47D, AU-1.4.47E, AU-1.4.47F, AU-1.4.47G 07/2020 Added new Paragraphs on Arranging Credit and Advising on Credit definitions. AU-1.1.13A 10/2020 Added a new Paragraph on compliance with AAOIFI Shari’a Standards. AU-1.2.2 01/2021 Deleted Sub-paragraph (g). AU-1.2.5 01/2021 Deleted Paragraph. AU-2.2.3 01/2021 Amended Paragraph on approved persons occupying controlled functions. AU-A.1.3 01/2022 Amended Paragraph. AU-A.1.5 01/2022 Amended Paragraph. AU-A.1.10 01/2022 Deleted Paragraph. AU-B.1.2 01/2022 Amended Paragraph. AU-1.1.6 01/2022 Amended Paragraph. AU-1.1.8 01/2022 Amended Paragraph. AU-1.1.13A 01/2022 Paragraph moved to AU-1.1.24. AU-1.1.18C 01/2022 Added a new Paragraph on Category 4 Investment Firms. AU-1.1.18D 01/2022 Added a new Paragraph on Category 4 Investment Firms. AU-1.1.18E 01/2022 Added a new Paragraph on Category 4 Investment Firms. AU-1.1.18F 01/2022 Added a new Paragraph on Category 4 Investment Firms. AU-1.1.24 01/2022 Amended Paragraph. AU-1.1.24B 01/2022 Amended Paragraph. AU-1.4.48 01/2022 Amended Paragraph. AU-5.4.1 01/2022 Amended Paragraph. AU-1.1.22D – AU-1.1.22J 01/2024 Added new Paragraphs on regulated investment services involving crypto-assets requirements. Appendix AU-1 01/2024 Added a new appendix on the Requirements for Regulated Investment Services Involving Crypto Assets. Superseded Requirements
AU-A.2.4
This Module supersedes the following provisions contained in circulars or other regulatory instruments:
Circular/other reference Provision Subject Standard Conditions and Licensing Criteria: investment advisers/brokers. All articles Scope of license and licensing conditions. Standard Conditions and Licensing Criteria: broking company All articles Scope of license and licensing conditions. Standard Conditions and Licensing Criteria: stockbrokerage All articles Scope of license and licensing conditions. Circular BC/11/98, dated 27/7/98 All articles Appointment and suitability of Directors and senior managers ('fit and proper'). Amended: July 2007AU-A.2.5
Further guidance on the implementation and transition to Volume 4 (Investment business) is given in Module ES (Executive Summary).
Amended: July 2007AU-B AU-B Scope of Application
AU-B.1 AU-B.1 The Public
AU-B.1.1
The Authorisation requirements in Chapter AU-1 are generally applicable to the public, in that they prevent a person (whether legal or natural) from undertaking certain specified activities if they do not hold the appropriate authorisation from CBB or marketing any
financial services unless specifically allowed to do so by the CBB (see Rule AU-1.1.1). In addition, those applying for authorisation are also required to comply with the relevant requirements and procedures contained in this Module.Amended: January 2013
Amended: July 2007AU-B.1.2
Three types of authorisation are prescribed:
(i) Any person seeking to provide aregulated investment service within or from the Kingdom of Bahrain must hold the appropriate CBB license (see AU-1.1);(ii) Any person seeking to act as “controller” of the person who holds a CBB license; and(iii) Natural persons wishing to perform acontrolled function in aninvestment firm licensee also require prior CBB approval, as anapproved person (see AU-1.2).Amended: January 2022
Amended: July 2007AU-B.1.3
[This Paragraph deleted 07/2010.]
Deleted: July 2010AU-B.2 AU-B.2 Licensees and Authorised Persons
AU-B.2.1
Various requirements in Chapters AU-2 to AU-5 inclusive also apply to persons once they have been authorised by the CBB (whether as
licensees orapproved persons ).Amended: July 2007AU-B.2.2
Chapter AU-2 applies to
investment firm licensees (not just applicants), since licensing conditions have to be met on a continuous basis bylicensees . Similarly, Chapter AU-3 applies toapproved persons on a continuous basis; it also applies toinvestment firm licensees seeking anapproved person authorisation. Chapter AU-5 contains requirements applicable tolicensees , with respect to the starting up of their operations, as well as tolicensees andapproved persons , with respect to the amendment or cancellation of their authorised status. Finally, Section AU-6.2 imposes annual fees onlicensees .Amended: July 2007AU-1 AU-1 Authorisation Requirements
AU-1.1 AU-1.1 Licensing
AU-1.1.1
No person may:
(a) Undertake (or hold themselves out to undertake)regulated investment services , by way of business, within or from the Kingdom of Bahrain unless duly licensed by the CBB;(b) Hold themselves out to be licensed by the CBB unless they have as a matter of fact been so licensed; or(c) Market anyfinancial services in the Kingdom of Bahrain unless:(i) Allowed to do by the terms of a license issued by the CBB;(ii) The activities come within the terms of an exemption granted by the CBB by way of a Directive; or(iii) Has obtained the express written permission of the CBB to offerfinancial services .Amended: January 2013
Amended: July 2007AU-1.1.2
For the purposes of Rule AU-1.1.1(a), please refer to Section AU-1.4 for the definition of '
regulated investment services ' and 'by way of business'. Such activities will be deemed to be undertaken within or from the Kingdom of Bahrain if, for example, the person concerned:(a) Is incorporated in the Kingdom of Bahrain;(b) Uses an address situated in the Kingdom of Bahrain for its correspondences; or(c) Directly solicits clients.Amended: January 2011
Amended: July 2007AU-1.1.3
For the purposes of Rule AU-1.1.1(b), persons would be considered in breach of this requirement if they were to trade as, or incorporate a company in Bahrain with a name containing the words (or the equivalents in any language) 'adviser', 'consultant', or 'manager' in combination with 'investment', or 'portfolio', without holding the appropriate CBB license or the prior approval of the CBB.
Amended: July 2007AU-1.1.3A
In accordance with Resolution No.(16) for the year 2012 and for the purpose of Subparagraph AU-1.1.1(c), the word 'market' refers to any promotion, offering, announcement, advertising, broadcast or any other means of communication made for the purpose of inducing recipients to purchase or otherwise acquire
financial services in return for monetary payment or some other form of valuable consideration.Added: January 2013AU-1.1.3B
Persons in breach of Subparagraph AU-1.1.1(c) are considered in breach of Resolution No.(16) for the year 2012 and are subject to penalties under Articles 129 and 161 of the CBB Law (see also Section EN-10.2A).
Added: January 2013AU-1.1.4
Where a person is licensed under Volumes 1 or 2, i.e. as a bank, then a separate license under Volume 4 is not required in order to undertake activities of the kind specified under Section AU-1.4.
AU-1.1.5
Persons licensed as banks by the CBB may also undertake the specific activities covered by the definition of
regulated investment services (such as trading infinancial instruments as principal), since these specific activities also form part of the definition ofregulated banking services (orregulated Islamic banking services in the case of Islamic banks). In such cases, banks are not required to hold a separateinvestment firm license .Amended: July 2007AU-1.1.6
Depending on the type of
regulated investment services that a person wishes to undertake, applicants must seek to be licensed either as aCategory 1 , aCategory 2 , aCategory 3 or a Category 4investment firm .Amended: January 2022AU-1.1.7
Persons wishing to be licensed to undertake
regulated investment services within or from the Kingdom of Bahrain must apply in writing to the CBB.Amended: July 2007AU-1.1.8
An application for a license must be in the form prescribed by the CBB and must contain, inter alia:
(a) A business plan specifying the type of business to be conducted;(b) Application for authorisation of allcontrollers ; and(c) Application for authorisation of allcontrolled functions .Amended: January 2022
Amended: July 2007AU-1.1.9
The CBB will review the application and duly advise the applicant in writing when it has:
(a) Granted the application without conditions;(b) Granted the application subject to conditions specified by the CBB; or(c) Refused the application, stating the grounds on which the application has been refused and the process for appealing against that decision.Amended: July 2007AU-1.1.10
Detailed rules and guidance regarding information requirements and processes for licenses can be found in Section AU-5.1. As specified in Paragraph AU-5.1.12, the CBB will provide a formal decision on a license application within 60 calendar days of all required documentation having been submitted in a form acceptable to the CBB.
Amended: July 2007AU-1.1.11
All applicants seeking an
investment firm license must satisfy the CBB that they meet, by the date of authorisation, the minimum criteria for licensing, as contained in Chapter AU-2. Once licensed,investment firm licensees must maintain these criteria on an on-going basis.Amended: July 2007Investment Firm License Categories
AU-1.1.12
For the purposes of Volume 4 (Investment Business),
regulated investment services may be undertaken under three categories ofinvestment firms as follows:Amended: July 2007Category 1
AU-1.1.13
For the purposes of Volume 4 (Investment Business),
Category 1 investment firms may undertake (subject to Rule AU-1.1.19) anyregulated investment service , as listed below:(a) Dealing infinancial instruments as principal;(b) Dealing infinancial instruments as agent;(c) Arranging deals infinancial instruments ;(d) Managingfinancial instruments ;(e) Safeguardingfinancial instruments (i.e. acustodian ;(f) Advising onfinancial instruments ;(ff) Arranging Credit and Advising on Credit; and(g) Operating acollective investment undertaking (i.e. anoperator ).Amended: July 2020
Added: July 2007AU-1.1.13A
[This Paragraph has been moved to AU-1.1.24].
Amended: January 2022
Added: October 2020AU-1.1.14
[This Paragraph was moved and amended to Paragraph AU-1.4.11A in January 2012].
Amended: January 2012
Amended: July 2007Category 2
AU-1.1.15
For the purposes of Volume 4 (Investment Business),
Category 2 investment firms may undertake (subject to Rule AU-1.1.19) anyregulated investment service (as listed in Rule AU-1.1.13), except that of 'dealing infinancial instruments as principal'.AU-1.1.16
A
Category 2 investment firm cannot, therefore, trade infinancial instruments for its own account ('dealing infinancial instruments as principal'), but it may conduct all other types ofregulated investment services , including holdingclient assets .Amended: July 2007Category 3
AU-1.1.17
For the purposes of Volume 4 (Investment Business),
Category 3 investment firms may undertake (subject to Rules AU-1.1.18 and AU-1.1.19) the followingregulated investment services only:(a) Arranging deals infinancial instruments ;(b) Advising onfinancial instruments ; and(c) Arranging Credit and Advising on Credit.Amended: July 2020
Added: July 2007AU-1.1.18
When undertaking either of the
regulated investment services listed under Rule AU-1.1.17,Category 3 investment firms :a) Must be independent;b) May not hold anyclient assets ;c) Must refrain from receiving any fees or commissions from any party other than theclient ; and(d) Must not have an 'agency' relationship (tied agent) with an investment provider.Amended: October 2016
Amended: October 2009
April 2008
Amended: July 2007AU-1.1.18A
In assessing the independence of a
Category 3 investment firm , the CBB will take into account theregulated investment services offered in relation to financial instruments of a related party.Amended: October 2016
Adopted: April 2008AU-1.1.18B
For the purpose of Paragraph AU-1.1.18A, a related party of a
Category 3 investment firm includes:(c) An associate of acontroller as defined in Module GR;(d) The extended family of acontroller including a father, mother, father-in-law, mother-in-law, brother, sister, brother-in-law, sister-in-law, or grandparent;(e) A corporate entity, whether or not licensed or incorporated in Bahrain, where any of the persons identified in Sub-Paragraphs (c) and (d) is a Director or would be considered acontroller were the definition of controller set out in Paragraph GR-5.2.1 applied to that corporate entity; and(f) [This Subparagraph has been deleted].Amended: October 2016
Adopted: April 2008Category 4
AU-1.1.18C
For the purposes of Volume 4 (Investment Business),
category 4 investment firms are permitted to provide the followingregulated investment services toaccredited investors :a) Operating acollective investment undertaking (CIU ); andb) In respect of venture capitalCIUs that thecategory 4 investment firm operates/manages, act ascustodian (i.e. safeguardingfinancial instruments ).Added: January 2022AU-1.1.18D
While
category 1 investment firms andcategory 2 investment firms can operate/manage all types ofCIUs , targetingretail clients ,expert investors andaccredited investors ,category 4 investment firm license caters to the business models of specialist fund managers who operate/manageCIUs targeted ataccredited investors only. Examples of suchCIUs are private equity funds, hedge funds, structured funds, real estate funds, venture capital funds and other alternative investment funds. Anoperator ofCIUs who markets or manages aCIU targeted atretail clients orexpert investors would not be eligible to obtain acategory 4 investment firm license.Category 4 investment firms also act asplacement agents ofoverseas domiciled CIUs they operate/manage.Added: January 2022AU-1.1.18E
Category 4 investment firms must appoint independentcustodians to safeguardclient assets . However, in accordance with Sub-paragraph AU-1.1.18C(b),category 4 investment firms may be authorised by the CBB to act ascustodians of the venture capitalCIUs they operate/manage provided they meet the requirements stipulated in Section C4-3.3 of the CBB Rulebook, Volume 4 regarding the safeguarding ofclient assets andclient money . This entails thatcategory 4 investment firms can safeguard the illiquid assets of the venture capitalCIUs , butclient money must be kept in aclient bank account .Added: January 2022AU-1.1.18F
Category 4 investment firms are only subject to Sections AU-1.1, AU-1.4, AU-1.5 and the provisions of Modules PB, C4, FC and EN.Category 4 investment firms must also comply with CBB Rulebook Volume 7 requirements for authorisation/registration/filing of CIUs to be offered toaccredited investors .Added: January 2022Combining Regulated Investment Services
AU-1.1.19
Investment firm licensees may combine two or moreregulated investment services , providing these fall within the permitted list of services for their investment firm category, and such combinations are not restricted by Module BC (Business Conduct).Suitability
AU-1.1.21
[This Paragraph was deleted in January 2011].
Deleted: January 2011
Amended: July 2007AU-1.1.22
[This Paragraph was deleted in January 2011].
Deleted: January 2011
Amended: July 2007AU-1.1.22A
As per Article 48 of the CBB Law,
investment firm licensees must seek CBB’s prior written approval before undertaking newregulated investment services .Added: July 2020AU-1.1.22B
Investment firm licensees wishing to undertake the activity of Arranging Credit and Advising on Credit must satisfy the CBB that they have sufficient expertise to undertake this activity and must obtain the CBB’s prior written approval for undertaking the same.Added: July 2020AU-1.1.22C
For purposes of Paragraph AU-1.1.22B,
investment firm licensees must ensure that the officer responsible for dealing with the customers for Arranging Credit and Advising on Credit is competent and has demonstrated his competence through appropriate qualifications and experience to carry out such function.Added: July 2020AU-1.1.22D
Investment firm licensees wishing to undertake the followingregulated investment services involvingcrypto-assets that fall under the definition offinancial instruments must seek the CBB’s prior approval before undertaking such activity:(a) Dealing infinancial instruments as agent;(b) Arranging deals infinancial instruments ;(c) Managingfinancial instruments ;(d) Safeguardingfinancial instruments (i.e. acustodian );(e) Advising onfinancial instruments ; and(f) Operating acollective investment undertaking (i.e. anoperator ).Investment firm licensees must not undertake the activity of dealing incrypto-assets as principal.Added: January 2024AU-1.1.22E
Investment firm licensees offering theregulated investment services referred to in Paragraph AU-1.1.22D must comply with the requirements stipulated in Appendix AU-1, as applicable.Added: January 2024AU-1.1.22F
Investment firm licensees undertaking theregulated investment service involving safe custody ofcrypto-assets (custody service), whether through “in house” arrangement or through a “third party”, remain responsible for safeguarding, storing, holding or maintaining custody ofcrypto-assets and must have systems and controls in place to:(a) Ensure the proper safeguarding ofcrypto-assets ;(b) Ensure that such safe custody ofcrypto-assets is identifiable and secure at all times; and(c) Ensure protection against the risk of loss, theft or hacking.Added: January 2024AU-1.1.22G
For the purpose of Paragraph AU-1.1.22F,
investment firm licensees may implement the following three types of custodial arrangements or any other type of custodial arrangement that is acceptable to the CBB:(a) Thelicensee is wholly responsible for custody of client’scrypto-assets and provides this service “in-house” through its owncrypto-assets wallet solution. Such an arrangement includes scenarios where alicensee provides its own inhouse proprietary wallet for clients to store anycrypto-assets bought through thatlicensee or transferred into the wallet from other sources.(b) Thelicensee is wholly responsible for the custody of client’scrypto-assets but outsources this service to a third partycrypto-asset custodian . Such an arrangement includes the scenario where alicensee uses a third-party service provider to hold all its clients’crypto-assets (e.g., all or part of the clients’ private keys).(c) Thelicensee wholly allows clients to “self-custodise” theircrypto-assets . Such an arrangement includes scenarios wherelicensees require clients to self-custodise theircrypto-assets . Suchlicensees only provide the platform for clients to buy and sellcrypto-assets . Clients are required to source and use their own third partycrypto-asset custodians (which thelicensee have no control over or responsibility for). This arrangement also includes the scenario wherelicensees provide an in-house wallet service for clients, but also allow clients to transfer theircrypto-assets out of this wallet to another wallet from a third-party wallet provider chosen by the client (and which thelicensee does not control).Added: January 2024AU-1.1.22H
Where
investment firm licensees provide a third-partycrypto-asset custodian to a client it must undertake an appropriate risk assessment of thatcrypto-asset custodian .Licensees must also retain ultimate responsibility for safe custody ofcrypto-assets held on behalf of clients and ensure that they continue to meet all their regulatory obligations with respect tocrypto-asset custody service and outsourced activities.Added: January 2024AU-1.1.22I
Investment firm licensees offering theregulated investment services referred to in Paragraph AU-1.1.22D must provide a report from an independent third-party expert that they have established adequate policies, procedures, systems and controls to manage the associated risks and undertake such activities in compliance with the requirements of Chapter FC-11 and Appendix AU-1. In addition,licensees must satisfy the CBB that they have sufficient competence and expertise to undertake the activities.Added: January 2024AU-1.1.22J
For purpose of Paragraph AU-1.1.22D,
investment firm licensees must submit a board resolution to undertake the activity together with the following information:(a) Description of the services/products;(b) Changes to organisation structure and framework (if any);(c) Experience of resources responsible for such services and their details; and(d) Enhancements to its risk management framework to capture, monitor, measure, control and report risks arising from the activity.Added: January 2024Conventional and Islamic Investment Firms
AU-1.1.23
Investment firm licensees may deal in both conventional and Islamicfinancial instruments . Only thoseinvestment firm licensees whose operations are fully shari'a compliant, however, may hold themselves out to be anIslamic investment firm .Amended: July 2007AU-1.1.24
Where
licensees are undertaking regulated activities in accordance with Shari'a, all transactions and contracts concluded byinvestment firm licensees must comply with Shari’a standards issued by the Accounting and Auditing Organisation for Islamic Financial Institutions (AAOIFI). The validity of the contract or transaction is not impacted, if at a later date, the relevant AAOIFI Shari’a standard are amended.Amended: January 2022
Amended: October 2014
Amended: April 2013
Amended: October 2009
July 2007AU-1.1.24A
In accordance with Paragraph HC-9.2.1, Category 1 and 2
Islamic investment firms must maintain a Shari'a Supervisory Board, comprised of at least 3 Shari'a board members, to verify that their operations are Shari'a compliant.Added: October 2014AU-1.1.24B
Category 3 and Category 4
Islamic investment firms must appoint a minimum of one Shari'a advisor or scholar to verify that their operations are Shari'a compliant.Amended: January 2022
Added: October 2014AU-1.1.25
Investment firm licensees (whether conventional or Islamic) may not accept shari'a money placements or deposits. They may not enter into shari'a financing contracts (except where it is an incidental part of assisting a client to buy, sell, subscribe for orunderwrite a financial instrument). Finally, they may not offer Shari'a Profit Sharing Investment Accounts (whether restricted or unrestricted).Amended: October 2012
Amended: July 2007AU-1.1.26
Shari'a money placements or deposits include money taken under q'ard or al-wadia contracts. Shari'a financing contracts include contracts such as murabaha, bay muajjal, bay islam, ijara wa iktina and istisna'a. Profit sharing investment accounts include those accounts undertaken under mudaraba and musharaka contracts.
AU-1.1.27
The transactions prohibited under Rule AU-1.1.25 may only be undertaken by bank licensees.
AU-1.2 AU-1.2 Approved Persons
General Requirement
AU-1.2.1
Investment firm licensee must obtain the CBB's prior written approval for any person wishing to undertake acontrolled function in aninvestment firm licensee . The approval from the CBB must be obtained prior to their appointment, subject to the variations contained in Paragraphs AU-1.2.3 to AU-1.2.5.Amended: January 2016
Amended: July 2007AU-1.2.2
Controlled functions are those of:(a)Director ;(b)Chief Executive orGeneral Manager ;(c)Head of function ;(d) Compliance officer;(e) Money Laundering Reporting Officer;(f) [Subparagraph deleted in January 2011];(g) [Subparagraph deleted in January 2021];(h)Financial Instruments Trader ; and(i)Investment consultant orinvestment adviser .Amended: January 2021
Amended: April 2018
Amended: January 2016
Amended: January 2011
Amended: October 2009
July 2007AU-1.2.3
In the case of
Bahraini investment firm licensees , prior approval is required for all of the abovecontrolled functions . Combination of the abovecontrolled functions is subject to the requirements contained in Modules HC and RM.Amended: October 2009
July 2007AU-1.2.4
In the case of
overseas investment firm licensees , prior approval is required forcontrolled functions (b), defined as the 'Branch Manager' of the Bahrain branch (however titled by the licensee), (c), (d), (e), (f), (h) and (i). Combination of the abovecontrolled functions is subject to the requirements contained in Modules HC and RM.Amended: October 2009
July 2007AU-1.2.5
[This Paragraph was deleted in January 2021].
Amended: January 2021
Amended: October 2009Basis for Approval
AU-1.2.6
Approval under Paragraph AU-1.2.1 is only granted by the CBB, if it is satisfied that the person is fit and proper to hold the particular position in the licensee concerned. 'Fit and proper' is determined by the CBB on a case-by-case basis. The definition of 'fit and proper' and associated guidance is provided in Sections AU-3.1 and AU-3.2 respectively.
Amended: July 2007Definitions
AU-1.2.7
Director is any person who is a member of the licensee's Board of Directors, and is individually, and collectively with other Directors responsible for directing the affairs and overseeing the activities of the licensee, as detailed in section HC-1.2.Amended: July 2019
Amended: July 2007AU-1.2.8
The fact that a person may have '
Director ' in their job title does not of itself make them aDirector within the meaning of the definition noted in Paragraph AU-1.2.7. For example, a 'Director of Marketing', is not necessarily a member of the Board ofDirectors and therefore may not fall under the definition of Paragraph AU-1.2.7.Amended: July 2007AU-1.2.9
Investment firm licensees must appoint a person to undertake the function ofChief Executive ,General Manager orManaging Director . TheChief Executive orGeneral Manager means a person who is responsible for the conduct of the licensee (regardless of actual title). TheChief Executive orGeneral Manager must be resident in Bahrain. This person is responsible for the conduct of the whole of the firm, or, in the case of anoverseas investment firm licensee , for all of the activities of the branch (ref. HC-6.3.4).Amended: January 2011
Amended: July 2010AU-1.2.9A
A licensee may appoint a
Director on the Board to undertake the responsibility of theChief Executive orGeneral Manager , i.e aManaging Director , in which case the appointment of aChief Executive orGeneral Manager in addition to theManaging Director will not be permitted.Amended: April 2011
Adopted: January 2011AU-1.2.9B
The
Chief Executive ,General Manager orManaging Director of thelicensee :(a) Should be fully responsible for the executive management and performance of thelicensee , within the framework of delegated authorities set by the Board;(b) Must devote full-time working hours to thelicensee ; and(c) Must not be employed at any other firm.Adopted: January 2011AU-1.2.9C
The Chairman of the Board may not undertake any executive role, including that of
Chief Executive ,General Manager orManaging Director .Adopted: January 2011AU-1.2.9D
The
Chief Executive Officer orManaging Director are not permitted, at any time to assume Chairmanship or Deputy Chairmanship of the Board.Adopted: January 2011AU-1.2.9E
Residency requirements apply to
Chief Executives ,General Managers orManaging Directors : see Section AU-2.2.Adopted: January 2011AU-1.2.10
Head of function means a person who exercises major managerial responsibilities, is responsible for a significant business or operating unit, or has senior managerial responsibility for maintaining accounts or other records of the licensee.AU-1.2.11
Whether a person is a
head of function will depend on the facts in each case and is not determined by the presence or absence of the word in their job title. Examples ofhead of function might include, depending on the scale, nature and complexity of the business, a deputyChief Executive ; heads of departments such as Risk Management, Compliance or Internal Audit; or the Chief Financial Officer.AU-1.2.12
Financial Instruments Trader means a person who is engaged in buying or sellingfinancial instruments .Amended: July 2007AU-1.2.13
An
investment consultant orinvestment adviser refers to the function of advising a client or potential client with respect to buying, selling, subscribing for orunderwriting a particularfinancial instrument or exercising any right conferred by such afinancial instrument .Amended: October 2012
Amended: July 2012
Amended: July 2007AU-1.2.13A
If a person is merely responsible for maintaining a client relationship and providing administrative support without giving advice, such person is not considered an
investment consultant nor aninvestment adviser and need not be approved by the CBB, as such a function would not be considered acontrolled function .Added: July 2012AU-1.2.13B
Any other staff of an
investment firm licensee must not provide advice to a client or potential client, as defined in Paragraph AU-1.2.13. Otherapproved persons , must not provide advice to a client or potential client, as defined in Paragraph AU-1.2.13, unless suchapproved person has been specifically approved by the CBB as aninvestment consultant orinvestment adviser , in addition to their initialcontrolled function .Added: July 2012AU-1.2.14
Where a firm is in doubt as to whether a function should be considered a
controlled function it must discuss the case with the CBB.Amended: July 2007AU-1.2.15
The
controlled function of compliance officer is defined in accordance with the compliance function under Section HC-6.5. Thecontrolled functions of Money Laundering Reporting Officer/Deputy Money Laundering Reporting Officer are defined under Chapter FC-3.Amended: January 2011
Amended: October 2009AU-1.2.16
All
investment firm licensees must designate an employee, of appropriate standing and resident in Bahrain, as compliance officer. The duties of the compliance officer include:(a) Having responsibility for oversight of the licensee's compliance with the requirements of the CBB; and(b) Reporting to the licensee's Board in respect of that responsibility.Amended: July 2012
Adopted: April 2011AU-1.3 AU-1.3 [This Section deleted 07/2007]
Deleted: July 2007AU-1.3.1
A person may not carry on the business of an administrator without being registered as such with the BMA.
AU-1.3.2
For the purposes of Rule AU-1.3.1, administrators are defined as persons who administer financial instruments and related services such as cash/ collateral management.
AU-1.3.3
Acting as an administrator refers to administering certain specified functions in relation to
financial instruments that include the following:a) legal and fund management accounting services;b) client inquiries;c) valuation and pricing (including tax returns);d) regulatory compliance monitoring;e) maintenance of unit-holder register;f) distribution of income;g) unit issues and redemption;h) contract settlements (including certificate dispatch); andi) record-keeping.AU-1.3.4
An application for registration must be in the form prescribed by the BMA in Section AU-5.3.
AU-1.3.5
A registered administrator may not undertake any
regulated investment services .AU-1.4 AU-1.4 Definition of Regulated Investment Services
AU-1.4.1
For the purposes of Volume 4 (Investment Business),
regulated investment services are any of the activities listed under Paragraph AU-1.1.13, as further defined in this Section, carried on by way of business.Amended: July 2007AU-1.4.2
For the purposes of Volume 4 (Investment Business), carrying on a
regulated investment service by way of business means:(a) Undertaking one or more of the activities listed under Paragraph AU-1.1.13 on a professional basis and for commercial gain;(b) Holding oneself out as willing and able to engage in that activity; or(c) Regularly soliciting other persons to engage in transactions constituting that activity.Amended: October 2012
Amended: July 2007General Exclusions
AU-1.4.3
A person does not carry on an activity constituting a
regulated investment service if the activity:(a) Is carried on in the course of a business which does not ordinarily constitute the carrying on of a regulated activity;(b) May reasonably be regarded as a necessary part of any other services provided in the course of that business; and(c) Is not remunerated separately from the other services.Amended: July 2007AU-1.4.4
A person does not carry on an activity constituting a
regulated investment service if the person is a body corporate and carries on that activity solely with or for other bodies corporate that are members of the same group.AU-1.4.5
A person does not carry on an activity constituting a
regulated investment service if such person carries on an activity with or for another person, and they are both members of the samefamily .AU-1.4.6
A person does not carry on an activity constituting a
regulated investment service if the sole or main purpose for which the person enters into the transaction is to limit any identifiable risks arising in the conduct of his business, providing the business conducted does not itself constitute a regulated activity.Amended: July 2007AU-1.4.7
For example, an industrial company entering into an interest rate swap to switch floating-rate borrowings for fixed rate borrowings, in order to manage interest rate risk, would not be considered to be dealing in
financial instruments as principal, and would not therefore be required to be licensed as an investment firm.Amended: July 2007AU-1.4.8
A person does not carry on an activity constituting a
regulated investment service if that person enters into that transaction solely as a nominee for another person, and acts under instruction from that other person; or is an employee orDirector of a person who is aninvestment firm licensee .Amended: July 2007AU-1.4.9
A person does not carry on an activity constituting a
regulated investment service if that person is a government body charged with the management offinancial instruments on behalf of a government or public body.AU-1.4.10
A person does not carry on an activity constituting a
regulated investment service if that person is an exempt person, as specified by Royal decree.Dealing in Financial Instruments as Principal
AU-1.4.11
Dealing in
financial instruments as principal means buying, selling, subscribing for orunderwriting anyfinancial instrument on own account, includingunderwriting transactions.Amended: October 2014
Amended: October 2012
Amended: October 2009AU-1.4.11A
Only
Category 1 investment firms are permitted tounderwrite the issuance offinancial instruments . However, the CBB will only permit such activity if thelicensee has the financial ability to absorb the size of the commitment.Amended: October 2014
Amended: October 2012
Added: January 2012AU-1.4.11B
In assessing the financial ability of a
licensee , the CBB will consider, amongst other factors, thelicensee's capital adequacy, its capacity to undertake the activity, and its track record in complying with applicable regulatory requirements. Anyunderwriting activities require the prior approval of the CBB's Capital Market Supervision Directorate and are subject to Module OFS (Offering of Securities) of Volume 6 of the CBB Rulebook.Amended: October 2014
Added: January 2012AU-1.4.12
A person carries on an activity specified in Rule AU-1.4.11 only if he is a market maker or deals on own account on an organised, frequent and systematic basis by providing a system accessible to third parties in order to engage in dealings with them.
AU-1.4.13
A licensee that carries on an activity of the kind specified by Rule AU-1.4.11 is authorised to act as a market maker and has the ability to deal in
financial instruments on terms determined by it. Such a licensee undertakes such an activity using its own financial resources, but may also controlclient assets or liabilities in the course of its designated investment business.Amended: July 2007AU-1.4.14
A person does not carry on an activity specified in Rule AU-1.4.11 if the activity relates to the person issuing his own shares/debentures, warrants or bonds.
AU-1.4.15
The activity specified in Rule AU-1.4.11 may also include providing credit, where it is an incidental part of buying, selling, subscribing for or
underwriting financial instruments . However, the amount provided as credit must be paid out of theinvestment firm licensee's capital and not out of clients' assets.Amended: October 2012AU-1.4.16
Examples of the type of 'incidental' credit activity provided for under Rule AU-1.4.15 include the provision of margin facilities on trading accounts or credit elements intrinsic to a structured or leveraged financial product.
Dealing in Financial Instruments as Agent
AU-1.4.17
Dealing in
financial instruments as agent means buying, selling, subscribing for orunderwriting financial instruments on behalf of aclient .Amended: October 2012AU-1.4.18
A
licensee that carries on an activity of the kind specified by Rule AU-1.4.17 is not a market maker, does not have the ability to deal infinancial instruments on terms determined by it and does not use its own financial resources for the purpose of buying, selling, subscribing for orunderwriting financial instruments . Such alicensee may however receive or holdclient assets in connection with a client transaction, in its capacity as agent.Amended: October 2012
Amended: July 2007Arranging Deals in Financial Instruments
AU-1.4.19
Arranging deals in
financial instruments means making arrangements on behalf of another person, whether as principal or agent, buying, selling or subscribing for deals infinancial instruments . This activity does not include the execution of a deal for which the arrangement has been made.Amended: January 2012
Amended: October 2009AU-1.4.19A
For
Category 3 Investment Firms , the activity of arranging the deals is limited to handling the administration arrangements only.Added: January 2012AU-1.4.20
A person does not carry on an activity specified in Rule AU-1.4.19 if the arrangement does not bring about the transaction to which the arrangement relates.
AU-1.4.21
A person does not carry on an activity specified in Rule AU-1.4.19 if a person's activities are limited solely to introducing clients to
licensees .AU-1.4.22
The exclusion in Rule AU-1.4.21 does not apply if the agent receives from any person, other than the client, any pecuniary reward or other advantage, for which he does not account to the client, arising out of his entering into the transaction. Thus, if A receives a commission from B for arranging credit or deals in investment for C, the exclusion in Rule AU-1.4.21 does not apply.
AU-1.4.23
A person does not carry on an activity specified in Rule AU-1.4.19 merely by providing the means of communication between two parties to a transaction.
AU-1.4.24
A person does not carry on an activity specified in Rule AU-1.4.19 if they operate an exchange, duly recognised and authorised by the CBB.
Amended: July 2007AU-1.4.25
The BFX, as a
licensed exchange , is not therefore classed as aninvestment firm licensee subject to Volume 4 (Investment Business). It is subject to separate rules issued by the CBB (see Volume 6 of the CBB Rulebook).Amended: January 2011
Amended: July 2007AU-1.4.26
Negotiating terms for an investment on behalf of a client is an example of an activity which may be regarded as activities of the kind specified in Rule AU-1.4.19.
AU-1.4.27
The following are examples of activities which, when taken in isolation, are unlikely to be regarded as an activity of the kind specified in Rule AU-1.4.19:
(a) Appointing professional advisers;(b) Preparing a prospectus/business plan;(c) Identifying potential sources of funding;(d) Assisting investors/subscribers/borrowers to complete and submit application forms; or(e) Receiving application forms for processing/checking and/or onward transmission.Amended: July 2007AU-1.4.28
The activity specified in Rule AU-1.4.19 may also include arranging credit, where it is an incidental part of assisting a client to buy, sell, subscribe for or
underwrite anyfinancial instrument .Amended: October 2012AU-1.4.29
Under Rule AU-1.4.28, arranging credit is an activity specified in Rule AU-1.4.19, only where it forms part of other arrangements to assist a client to buy, sell, subscribe for or
underwrite afinancial instrument . The activity of solely arranging credit is not a regulated activity for the purposes of Rule AU-1.4.19.Amended: October 2012Managing Financial Instruments
AU-1.4.30
Managing
financial instruments means managing on a discretionary basisfinancial instruments on behalf of another person.AU-1.4.31
Activities involving initiating and carrying out investment transactions on behalf of a client on a discretionary basis are included under the definition of Rule AU-1.4.30.
Safeguarding Financial Instruments (i.e. Custodian)
AU-1.4.32
Safeguarding
financial instruments means the safeguarding offinancial instruments for the account of clients.AU-1.4.33
A person undertaking an activity of the kind specified under Rule AU-1.4.32 may also be engaged in the administration of
financial instruments as defined in CBB Rulebook Volume 5 Module AU (Administrators) Paragraphs AU-1.1.11 and AU-1.1.12, including related services such as cash/collateral management, given that strict adherence to segregation of duties is observed.Amended: July 2019
Amended: January 2012
Amended: July 2010AU-1.4.34
A person undertaking an activity of the kind specified under Rule AU-1.4.32 cannot execute negotiable instruments such as cheques on behalf of a client.
Amended: July 2010
Amended: July 2007AU-1.4.35
A person does not carry on an activity specified in Rule AU-1.4.32 if the person receives documents relating to a
financial instrument for the purpose of onward transmission to, from or at the direction of the person to whom thefinancial instrument belongs; or else is simply providing a physical safekeeping service such as a deed box.Amended: July 2010
Amended: July 2007AU-1.4.36
A person does not carry on an activity specified in Rule AU-1.4.32 if a third person, namely a
qualifying custodian , accepts responsibility with regard to thefinancial instrument .Amended: July 2010AU-1.4.37
A '
qualifying custodian ' is a licensee who has permission to carry on an activity of the kind specified in Rule AU-1.4.32.Amended: July 2010
Amended: July 2007AU-1.4.38
A person does not carry on an activity specified in Rule AU-1.4.32 if they are managing a central depository, which is part of an exchange recognised by the CBB.
Amended: July 2010
Amended: July 2007AU-1.4.39
The following are examples of activities which, when taken in isolation, are unlikely to be regarded as an activity of the kind specified under Rule AU-1.4.32:
(a) Providing information as to the number of units or the value of any assets safeguarded; and(b) Converting currency.Amended: July 2010
Amended: July 2007AU-1.4.40 [This Paragraph deleted 07/2007.]
Deleted: July 2007Advising on Financial Instruments
AU-1.4.41
Advising on
financial instruments means giving advice to an investor or potential investor (or a person in his capacity as an agent for an investor or potential investor) on the merits of buying, selling, subscribing for orunderwriting a particularfinancial instrument or exercising any right conferred by such afinancial instrument .Amended: October 2012AU-1.4.41A
For the purpose of Rule AU-1.4.41, advising on
financial instruments includes givingdigital financial advice also known as 'robo-advice' or 'automated advice' using a computer program and algorithm to generate the advice.Added: April 2019AU-1.4.42
The activity defined in Rule AU-1.4.41 above does not include advising on mergers and acquisitions, unless otherwise agreed with the CBB on a case by case basis.
Added: July 2010AU-1.4.43
[This Paragraph was deleted in July 2020].
Deleted: July 2020
Added: July 2010AU-1.4.44
The following are examples of activities, which may be regarded as an activity as defined by Rule AU-1.4.41:
(a) A person may offer to tell a client when shares reach a certain value on the basis that when the price reaches that value it would be a good time to buy or sell them;(b) Recommendation on the size or timing of transactions; and(c) Advice on the suitability of thefinancial instrument , or on the characteristics or performance of thefinancial instrument or credit facility concerned.Amended: July 2010
Amended: July 2007AU-1.4.45
A person does not carry on an activity specified in Rule AU-1.4.41 by giving advice in any newspaper, journal, magazine, broadcast services or similar service in any medium if the principal purpose of the publication or service, taken as a whole, is neither:
(a) That of giving advice of the kind mentioned in Rule AU-1.4.41; nor(b) That of leading or enabling persons to buy, sell, subscribe for orunderwrite afinancial instrument .Amended: October 2012
Amended: July 2010
Amended: July 2007AU-1.4.46
The following are examples of activities which, when taken in isolation, are unlikely to be regarded as an activity as defined by Rule AU-1.4.41:
(a) Explaining the structure or the terms and conditions of afinancial instrument or credit facility;(b) Valuingfinancial instruments for which there is no ready market;(c) Circulating company news or announcements;(d) Comparing the benefits and risks of onefinancial instrument to another; and(e) Advising on the likely meaning of uncertain provisions in an agreement relating to, or the terms of, afinancial instrument or on the effect of contractual terms and their commercial consequences or on terms that are commonly accepted in the market.Amended: July 2010
Amended: July 2007AU-1.4.47
A person undertaking an activity of the kind specified under Rule AU-1.4.41 cannot accept or hold
client assets or execute negotiable instruments such as cheques on behalf of a client.Amended: July 2010
Amended: July 2007Arranging Credit and Advising on Credit
AU-1.4.47A
Arranging Credit means making arrangements for a borrower, to enter into a credit facility with a credit provider.
Added: July 2020AU-1.4.47B
An
investment firm licensee may only arrange for, or advise on credit facilities with a credit provider licensed to provide such facilities.Added: July 2020AU-1.4.47C
Activities that constitute Arranging Credit includes:
(a) Introducing potential borrowers to a credit provider (refer to Rule AU-1.4.47B);(b) Providing the required assistance to potential borrowers to obtain credit, such as the completion of application forms and other processes relevant to such transactions;(c) Negotiating terms of credit, including fees and charges;(d) Arranging for collaterals or other types of assurances required to be provided by the potential borrower to obtain credit; and(e) Arranging for corporate structuring and financing such as the acquisition, disposal, structuring, restructuring, financing or refinancing of a legal entity.Added: July 2020AU-1.4.47D
Advising on Credit means giving advice to a borrower, a potential borrower, or a person in his capacity as an agent of a borrower or a potential borrower, on the merits of entering into a particular credit facility.
Added: July 2020AU-1.4.47E
For the purposes of Paragraphs AU-1.4.47A to AU-1.4.47D, a borrower is:
(a) A natural person who is anaccredited investor ; or(b) A legal person who is anaccredited investor orexpert investor , and the credit facility in question is provided for use in the business activities of:(i) the legal person;(ii) a controller of the legal person;(iii) any member of the group to which the legal person belongs; or(iv) a joint venture of a legal person referred to in (i) – (iii).Added: July 2020AU-1.4.47F
For purposes of Subparagraph AU-1.4.47E (a),
investment firm licensees are prohibited from dealing withretail clients and/orexpert investors .Added: July 2020AU-1.4.47G
Investment firm licensees are encouraged to consider and give priority to CBB licensed credit providers when arranging for, or advising on credit facilities.Added: July 2020Operating a Collective Investment Undertaking (i.e. operator)
AU-1.4.48
Operating a
collective investment undertaking ('CIU') means operating, managing, establishing or winding up acollective investment undertaking .Amended: January 2022
Amended: July 2010
Amended: July 2007AU-1.4.49
For the purposes of Rule AU-1.4.48, a
collective investment undertaking is an undertaking the sole object of which is the collective investment of capital raised from the public infinancial instruments or other assets and which operates on the basis of risk-spreading; and the holdings of which are re-purchased or redeemed, directly or indirectly, out of those undertakings' assets.Amended: July 2010
Amended: July 2007AU-1.4.50
A person does not carry on an activity specified in Rule AU-1.4.48 if the activity relates to the person establishing or winding up a
collective investment undertaking , and that activity may be reasonably regarded as a necessary in the course of providing legal services or providing accounting services.Amended: July 2010AU-1.4.51
In the case of
CIUs whose holdings are listed and traded on a stock exchange (such as aclosed-ended fund ), actions taken by theCIU to align the stock exchange value of its holdings and its net asset value is taken as equivalent to the repurchase or redemption specified in Rule AU-1.4.49. The definition in Rule AU-1.4.49 thus recognises bothopen-ended funds andclosed-ended funds : unit trusts, investment trusts, mutual funds, SICAV and collective investment schemes are all examples ofCIUs .CIUs may also be constituted under contract law (as common funds managed by management companies); trust law (as unit trusts); or under statute (as investment companies).Amended: July 2010
Adopted: July 2007AU-1.4.52
See Volume 7 (CIU) of the CBB Rulebook, for the rules that apply to CIUs domiciled in Bahrain or domiciled in an overseas jurisdiction, and offered to investors resident in Bahrain. These rules also contain requirements that apply to the
operators of such CIUs.Amended: October 2012
Amended: July 2010
Adopted: July 2007AU-1.4.53
[Paragraph deleted 07/2006.]
Amended: July 2010AU-1.4.54
[Paragraph deleted 07/2006.]
Amended: July 2010AU-1.5 AU-1.5 Definition of Financial Instruments
For the purposes of Volume 4, a
financial instrument means any of the following:Amended: July 2007Transferable Securities
AU-1.5.1
Those classes of securities which are negotiable, with the exception of instruments of payment. Transferable securities include:
(a)Shares in companies and other securities equivalent toshares in companies, partnerships or other entities, and depositary receipts in respect ofshares ;(b)Bonds or other forms of securitised debt, including depositary receipts in respect of such securities;(c)Warrants ;(d) Any other securities giving the right to acquire or sell any such transferable securities or giving rise to a cash settlement determined by reference to transferable securities, currencies, interest rates or yields, commodities or other indices or measures.Amended: July 2007Islamic Financial Instruments
AU-1.5.2
Those
financial instruments — as defined elsewhere in Section AU-1.5 — that are shari'a compliant.Amended: July 2007Money-market Instruments
AU-1.5.3
Those classes of instruments which are normally dealt in on the money market, such as treasury bills and commercial papers and excluding instruments of payment.
Holdings in Collective Investment Undertakings
AU-1.5.4
Rights or interests (however described) of the participants in a
collective investment undertaking .Amended: July 2007Derivative Contracts other than Commodity Derivatives
AU-1.5.5
Options ,futures , forwards,swaps , forward rate agreements and any other derivative contracts relating to securities, currencies, interest rates or yields, or other derivative instruments, financial indices or financial measures which may be settled physically or in cash.Derivative Contracts relating to Commodities Settled in Cash
AU-1.5.6
Options ,futures ,swaps , forward rate agreements and any other derivative contracts relating to commodities that must be settled in cash or may be settled in cash at the option of one of the parties (otherwise than by reason of a default or other termination event).Derivative Contracts Relating to Commodities
AU-1.5.7
Options ,futures ,swaps , and any other derivative contract relating to commodities that can be physically settled.AU-1.5.8
Options ,futures ,swaps , forwards and any other derivative contracts relating to commodities, that can be physically settled not otherwise mentioned in Rule AU-1.5.7 above and not being for commercial purposes, which have the characteristics of other derivativefinancial instruments .Amended: July 2007Credit Derivatives
AU-1.5.9
Over the counter derivative instruments, which provide for the transfer of credit risk.
Financial Contracts for Differences
AU-1.5.10
Comprise rights under a contract for differences, or any other contract the purpose or pretended purpose of which is to secure a profit or avoid a loss by reference to fluctuations in:
(a) The value or price of investment orproperty of any description;(b) Any currency;(c) The rate of interest in any currency or any index of such rates (including interest rateoptions );(d) The level of any index which is derived for the prices of an investment or physical commodity (including indexoptions ); or(e) Any combination of the above.Amended: July 2007AU-1.5.11
The following are excluded from this definition of contracts for differences:
(a) Contracts where the parties intend that the profit is to be secured or the loss to be avoided by taking delivery ofproperty ; and(b) Contracts under which money is received by way of deposit on terms that any return to be paid on the sum deposited will be calculated by reference to an index, interest rate, exchange rate or other factor.Amended: July 2007Other Derivative Contracts
AU-1.5.12
Options ,futures ,swaps , forward rate agreements and any other derivative contracts relating to climatic variables, freight rates, emission allowances or inflation rates or other official economic statistics that must be settled in cash or may be settled in cash at the option of one of the parties (otherwise than by reason of a default or other termination event), as well as any other derivative contracts relating to assets, rights, obligations, indices and measures not otherwise mentioned in this Section, which have the characteristics of other derivativefinancial instruments .Interests in Real Estate Property
AU-1.5.13
Any
financial instrument giving right to or interests in real estate property other than owner occupied properties. This excludes the taking of charges over real estate property.Certificates Representing Certain Securities
AU-1.5.14
Certificates or other instruments which confer contractual or
property rights:(a) In respect of any investment held by someone other than the person on whom the rights are conferred by the certificate or other instrument; and(b) The transfer of which may be effected without requiring the consent of that person.Amended: July 2007Rights or Interests in Financial Instruments
AU-1.5.15
Rights to or interests in all
financial instruments under section AU-1.5.AU-2 AU-2 Licensing Conditions
AU-2.1 AU-2.1 Condition 1: Legal Status
Category 1 and 2 Investment Firms
AU-2.1.1
The legal status of a Category 1 or Category 2
investment firm licensee must be:(i) A Bahraini joint stock company (BSC); or(ii) A branch resident in Bahrain of a company incorporated under the laws of its territory of incorporation and (where local regulation so requires) authorised as market-maker in that territory.Amended: July 2007Category 3 Investment Firms
AU-2.1.2
The legal status of a Category 3
investment firm licensee must be:(i) A Bahraini joint stock company (BSC);(ii) A Bahraini company with limited liability ('WLL'); or(iii) A branch resident in Bahrain of a company incorporated under the laws of its territory of incorporation and (where local regulation so requires) authorised as market-maker in that territory.Amended: July 2007AU-2.1.3
Where the
investment firm licensee is a branch of anoverseas investment firm , an application for licensing will be considered after extensive enquiries into the firm's shareholders, management structure, financial position, its activities and how these activities are regulated.Amended: July 2007AU-2.2 AU-2.2 Condition 2: Mind and Management
AU-2.2.1
Investment firm licensees with their Registered Office in the Kingdom of Bahrain must maintain their Head Office in the Kingdom.Overseas investment firm licensees must maintain a local management presence and premises in the Kingdom appropriate to the nature and scale of their activities.AU-2.2.2
In assessing the location of an
investment firm licensee's Head Office, the CBB will take into account the residency of its Directors and senior management.Amended: January 2012
Amended: July 2007AU-2.2.3
The CBB requires that all
approved persons occupyingcontrolled functions outlined in Paragraph AU-1.2.2, except for Subparagraph (a) director, be resident in Bahrain.Amended: January 2021
Added: January 2012AU-2.3 AU-2.3 Condition 3: Controllers and Close Links
AU-2.3.1
Investment firm licensees must satisfy the CBB that theircontrollers are suitable and pose no undue risks to thelicensee .Investment firm licensees must also satisfy the CBB that theirclose links do not prevent the effective supervision of theinvestment firm licensee by the CBB and otherwise pose no undue risks to thelicensee .Amended: July 2007AU-2.3.2
For Category 1 and Category 2
investment firm licensees , at least one of thecontrollers of aninvestment firm licensee must be a reputable financial institution of financial soundness, operating within a regulated jurisdiction, with a legal structure, all of which must be acceptable to the CBB.Amended: January 2012
Amended: October 2009
July 2007AU-2.3.3
Chapters GR-5 and GR-6 contain the CBB's requirements and definitions regarding
controllers andclose links .Amended: October 2009AU-2.3.4
In summary,
controllers are persons who directly or indirectly are significant shareholders in aninvestment firm licensee , or who are otherwise able to exert significant influence on theinvestment firm licensee . The CBB seeks to ensure thatcontrollers pose no significant risks to thelicensee . In general terms,controllers are assessed in terms of their financial standing, their judicial and regulatory record, and standards of business and (where relevant) personal probity.Amended: October 2009
July 2007AU-2.3.5
An
investment firm licensee hasclose links with its subsidiaries, with its parent undertakings, and with subsidiaries of its parent undertakings. It also hasclose links with any entity in which the licensee, its subsidiaries, its parent undertakings, and the subsidiaries of its parent undertakings has an equity interest of more than 20% (either in terms of capital or voting rights). The CBB seeks to ensure that these closely linked entities do not pose any material financial, reputational or other risks to thelicensee . The CBB also seeks to ensure that the structure and geographical spread of the group is such that it is subject to adequate scrutiny at group level.Amended: July 2010
Amended: October 2009
Amended: July 2007AU-2.3.6
In all cases, when judging applications from existing groups, the CBB will have regard to the reputation and financial standing of the group as a whole. Where relevant, the CBB will also take into account the extent and quality of supervision applied to overseas members of the group and take into account any information provided by other supervisors in relation to any member of the group.
Amended: October 2009
July 2007AU-2.4 AU-2.4 Condition 4: Board and Employees
AU-2.4.1
Those nominated to carry out
controlled functions must satisfy CBB'sapproved person's requirements.Amended: July 2007AU-2.4.2
The definition of
controlled functions is contained in AU-1.2, whilst AU-3 sets out CBB'sapproved persons requirements. Applications forapproved person status must be submitted using the prescribedapproved persons form.Amended: July 2007AU-2.4.3
The
investment firm licensee's staff, taken together, must collectively provide a sufficient range of skills and experience to manage the affairs of thelicensee in a sound and prudent manner.Investment firm licensees must ensure their employees meet any training and competency requirements specified by the CBB.Amended: July 2007AU-2.4.4
The CBB's training and competency requirements are contained in Module TC (Training and Competency).
Amended: July 2007AU-2.5 AU-2.5 Condition 5: Financial Resources
AU-2.5.1
Investment firm licensees must maintain a level of financial resources, as agreed with the CBB, adequate for the level of business proposed. The level of financial resources held must exceed at all times the minimum requirements contained in Module CA (Capital Adequacy), as specified for the category of investment license held.Amended: July 2007AU-2.5.2
[This Paragraph deleted 07/2010.]
Deleted: July 2010AU-2.5.3
Overseas applicants are required to provide written confirmation from their head office that the head office will provide financial support to the branch sufficient to enable it to meet its obligations as and when they fall due. Overseas applicants must also demonstrate that the company as a whole is adequately resourced for the amount of risks undertaken.
Amended: July 2007AU-2.6 AU-2.6 Condition 6: Systems and Controls
AU-2.6.1
Investment firm licensees must maintain systems and controls that are, in the opinion of the CBB, adequate for the scale and complexity of their activities. These systems and controls must meet the minimum requirements contained in Modules HC (High Level Controls) and RM (Risk Management), as specified for the category ofinvestment firm license held.Amended: July 2007AU-2.6.2
Investment firm licensees must maintain adequate segregation of responsibilities in their staffing arrangements, to protect against the misuse of systems or errors. Such segregation should ensure that no single individual has control over all stages of a transaction.AU-2.6.3
Investment firm licensees must maintain systems and controls that are, in the opinion of the CBB, adequate to address the risks of financial crime occurring in the licensee. These systems and controls must meet the minimum requirements contained in Module FC (Financial Crime), as specified for the category ofinvestment firm license held.Amended: July 2007AU-2.6.4
As part of the licensing approval process, applicants must demonstrate in their business plan (together with any supporting documentation) what risks their business would be subject to and how they would manage those risks. Applicants may also be asked to provide an independent assessment of the appropriateness of their systems and controls to the CBB.
Amended: July 2007AU-2.6.5
Investment firm licensees must, in connection with anyclient assets received in the course of their business, establish and maintain separateclient accounts, segregated from those used for their own funds, as required in Module CL.Amended: July 2007AU-2.7 AU-2.7 Condition 7: External Auditors
AU-2.7.1
Investment firm licensees must appoint external auditors, subject to prior CBB approval. The minimum requirements regarding auditors contained in Module AA (Auditors and Accounting Standards) must be met.Amended: July 2007AU-2.7.2
[This Paragraph deleted 07/2010.]
Deleted: July 2010AU-2.8 AU-2.8 Condition 8: Other Requirements
Books and Records
AU-2.8.1
Investment firm licensees must maintain comprehensive books of accounts and other records, which must be available for inspection within the Kingdom of Bahrain by the CBB, or persons appointed by the CBB, at any time.Investment firm licensees must comply with the minimum record-keeping requirements contained in Module GR. Books of accounts must comply with IAS (and relevant AAOIFI) standards.Amended: July 2007Provision of Information
General Conduct
AU-2.8.3
Investment firm licensees must conduct their activities in a professional and orderly manner, in keeping with good market practice standards.Investment firm licensees must comply with the general standards of business conduct contained in Module PB, as well as the standards relating to treatment of customers contained in Module BC.License Fees
AU-2.8.4
Investment firm licensees must comply with any license fee requirements applied by the CBB.Amended: July 2007AU-2.8.5
License fee requirements are contained in Chapter AU-6.
Amended: July 2007Additional Conditions
AU-2.8.6
Investment firm licensees must comply with any other specific requirements or restrictions imposed by the CBB on the scope of their license.Amended: July 2007AU-2.8.7
When granting a license, the CBB specifies the
regulated investment services that thelicensee may undertake and the category ofinvestment firm license granted.Licensees must respect the scope of their license. AU-5.4 sets out the process for varying the scope of an authorisation, should alicensee wish to undertake newregulated investment services .Amended: July 2007AU-2.8.8
In addition, the CBB may vary existing requirements or impose additional restrictions or requirements, beyond those already specified in Volume 4, to address specific risks.
Amended: July 2007AU-3 AU-3 Approved Persons Conditions
AU-3.1 AU-3.1 Condition 1: 'Fit and Proper'
AU-3.1.1
Licensees seeking anapproved person authorisation for an individual, must satisfy the CBB that the individual concerned is 'fit and proper' to undertake thecontrolled function in question.Amended: July 2007AU-3.1.2
The authorisation requirement for persons nominated to carry out
controlled functions is contained in Section AU-1.2. The authorisation process is described in Section AU-5.2.Amended: July 2007AU-3.1.3
Each applicant applying for
approved person status and those individuals occupyingapproved person positions must comply with the following conditions:(a) Has not previously been convicted of any felony or crime that relates to his/her honesty and/or integrity unless he/she has subsequently been restored to good standing;(b) Has not been the subject of any adverse finding in a civil action by any court or competent jurisdiction, relating to fraud;(c) Has not been adjudged bankrupt by a court unless a period of 10 years has passed, during which the person has been able to meet all his/her obligations and has achieved economic accomplishments;(d) Has not been disqualified by a court, regulator or other competent body, as a director or as a manager of a corporation;(e) Has not failed to satisfy a judgement debt under a court order resulting from a business relationship;(f) Must have personal integrity, good conduct and reputation;(g) Has appropriate professional and other qualifications for thecontrolled function in question (see Appendix TC-1 in Module TC (Training and Competency)); and(h) Has sufficient experience to perform the duties of thecontrolled function (see Appendix TC-1 in Module TC (Training and Competency)).Amended: January 2016
Amended: July 2007AU-3.1.4
In assessing the conditions prescribed in Rule AU-3.1.3, the CBB will take into account the criteria contained in Section AU-3.2. The CBB reviews each application on a case-by-case basis, taking into account all relevant circumstances. A person may be considered 'fit and proper' to undertake one type of
controlled function but not another, depending on the function's job size and required levels of experience and expertise. Similarly, a person approved to undertake acontrolled function in oneinvestment firm licensee may not be considered to have sufficient expertise and experience to undertake nominally the samecontrolled function but in a much bigger licensee.Amended: July 2007AU-3.1.5
In assessing a person's fitness and propriety, the CBB will also consider previous professional and personal conduct (in Bahrain or elsewhere) including, but not limited to, the following:
(a) The propriety of a person's conduct, whether or not such conduct resulted in a criminal offence being committed, the contravention of a law or regulation, or the institution of legal or disciplinary proceedings;(b) A conviction or finding of guilt in respect of any offence, other than a minor traffic offence, by any court or competent jurisdiction;(c) Any adverse finding in a civil action by any court or competent jurisdiction, relating to misfeasance or other misconduct in connection with the formation or management of a corporation or partnership;(d) Whether the person, or any body corporate, partnership or unincorporated institution to which the applicant has, or has been associated with as a director, controller, manager or company secretary been the subject of any disciplinary proceeding, investigation or fines by any government authority, regulatory agency or professional body or association;(e) The contravention of any financial services legislation;(f) Whether the person has ever been refused a license, authorisation, registration or other authority;(g) Dismissal or a request to resign from any office or employment;(h) Whether the person has been a Director, partner or manager of a corporation or partnership which has gone into liquidation or administration or where one or more partners have been declared bankrupt whilst the person was connected with that partnership;(i) The extent to which the person has been truthful and open with supervisors; and(j) Whether the person has ever entered into any arrangement with creditors in relation to the inability to pay due debts.Added: January 2016AU-3.1.6
With respect to Paragraph AU-3.1.5, the CBB will take into account the length of time since any such event occurred, as well as the seriousness of the matter in question.
Added: January 2016AU-3.1.7
Approved persons undertaking acontrolled function must act prudently, and with honesty, integrity, care, skill and due diligence in the performance of their duties. They must avoid conflicts of interest arising whilst undertaking acontrolled function .Amended: January 2016
Amended: July 2007AU-3.1.8
In determining where there may be a conflict of interest arising, factors that may be considered will include whether:
(a) A person has breached any fiduciary obligations to the company or terms of employment;(b) A person has undertaken actions that would be difficult to defend, when looked at objectively, as being in the interest of the licensee; and(c) A person has failed to declare a personal interest that has a material impact in terms of the person's relationship with the licensee.Amended: January 2016
Amended: July 2007AU-3.1.9
Further guidance on the process for assessing a person's 'fit and proper' status is given in Module EN (Enforcement): see Chapter EN-8.
Added: January 2016AU-3.2 AU-3.2 [This Section was deleted in January 2016]
AU-3.2.1
[This Paragraph was deleted in January 2016.]
AU-3.2.2
[This Paragraph was deleted in January 2016.]
AU-3.2.3
[This Paragraph was moved to Paragraph AU-3.1.9 in January 2016.]
AU-4 AU-4 [This Chapter deleted 07/2007]
Deleted: July 2007AU-4.1 AU-4.1 Condition 1: Relevant Expertise
AU-4.1.1
Administrators seeking registration must satisfy the BMA that they have relevant expertise. They must hold appropriate professional qualifications from a relevant, recognised professional body.AU-4.1.2
In the case of corporate persons wishing to provide administration services, the BMA expects management and other staff collectively to have sufficient appropriate expertise to ensure a professional level of service.
AU-4.2 AU-4.2 Condition 2: General Suitability
AU-4.2.1
Administrators seeking registration must satisfy the BMA that they are generally suitable to operate as such.AU-4.2.2
The Agency will have regard to the fitness and propriety of the person seeking registration to operate as Administrators, using the rules and guidance contained in Sections AU-3.1 and AU-3.2.
AU-4.2.3
The Agency will have regard to the person's reputation, financial soundness, and business conduct. The BMA will also review closely linked entities against the same criteria, using the definition of close links contained in Module GR (General Requirements).
AU-4.3 AU-4.3 Condition 3: Systems and Controls
AU-4.3.1
Administrators seeking registration must maintain systems and controls that are, in the opinion of the BMA, adequate for the scale and complexity of their activities.AU-4.3.2
Administrators seeking registration must maintain systems and controls that are, in the opinion of the BMA, adequate to address the risks of financial crime occurring. These systems and controls must meet the minimum requirements contained in Module FC (Financial Crime)AU-4.4 AU-4.4 Condition 4: External Auditors
AU-4.4.1
Administrators seeking registration must appoint external auditors, subject to prior BMA approval. The minimum requirements regarding auditors contained in Module AA (Auditors and Accounting Standards) must be met.AU-4.4.2
Administrators seeking registration must submit details of their proposed external auditors to the BMA.AU-4.5 AU-4.5 Condition 5: Other requirements
Books and Records
AU-4.5.1
Administrators must maintain comprehensive books of accounts and other records, which must be available for inspection within the Kingdom of Bahrain by the BMA, or persons appointed by the BMA, at any time.Administrators must comply with the minimum record-keeping requirements contained in Module GR.Provision of Information
AU-4.5.2
Administrators must act in an open and cooperative manner with the BMA.AU-5 AU-5 Information Requirements and Processes
AU-5.1 AU-5.1 Licensing
Application Form and Documents
AU-5.1.1
Applicants for a
license must fill in the Application Form 1 (Application for a License) online, available on the CBB website under E-services/online Forms. The applicant must upload scanned copies of supporting documents listed in Paragraph AU-5.1.5, unless otherwise directed by the CBB.Amended: July 2019
Amended: April 2018
Amended: July 2007AU-5.1.2
Articles 44 to 47 of the CBB Law govern the licensing process. This prescribes a single stage process, with the CBB required to take a decision within 60 calendar days of an application being deemed complete (i.e. containing all required information and documents). See below, for further details on the licensing process and time-lines.
Amended: July 2007AU-5.1.3
References to applicant mean the proposed
licensee seeking authorisation. An applicant may appoint a representative — such as a law firm or professional consultancy — to prepare and submit the application. However, the applicant retains full responsibility for the accuracy and completeness of the application, and is required to certify the application form accordingly. The CBB also expects to be able to liaise directly with the applicant during the authorisation process, when seeking clarification of any issues.Amended: July 2007AU-5.1.4
This Paragraph was deleted in January 2016.]
AU-5.1.5
Unless otherwise directed by the CBB, the following documents must be provided in support of a Form 1:
(a) A duly completed Form 2 (Application for Authorisation of Controller) for each controller of the proposed licensee;(b) A duly completed Form 3 (Application for Approved Person status), for each individual proposed to undertakecontrolled functions (as defined in Rule AU-1.2.2) in the proposedlicensee ;(c) A comprehensive business plan for the application, addressing the matters described in AU-5.1.6;(d) For overseas companies, a copy of the company's current commercial registration or equivalent documentation;(e) Where the applicant is an existing Bahraini company, a copy of the applicant's commercial registration certificate;(f) A certified copy of a Board resolution of the applicant, confirming its decision to seek a CBBinvestment firm license ;(h) In the case of applicants that are part of a regulated group, a letter of non-objection to the proposed license application from the applicant'slead supervisor , together with confirmation that the group is in good regulatory standing and is in compliance with applicable supervisory requirements, including those relating to capital requirements;(i) In the case of branch applicants, a letter of non-objection to the proposed license application from the applicant's home supervisor, together with confirmation that the applicant is in good regulatory standing and the company concerned is in compliance with applicable supervisory requirements, including those relating to capital;(j) In the case of branch applicants, copies of the audited financial statements of the applicant (head office) for the three years immediately prior to the date of application;(k) In the case of applicants that are part of a group, copies of the audited financial statements of the applicant's group, for the three years immediately prior to the date of application;(l) In the case of applicants not falling under either (j) or (k) above, copies of the audited financial statements of the applicant's major shareholder (where they are a legal person), for the three years immediately prior to the date of application;(m) In the case of applicants seeking to raise part of their capital through a private placement, a draft of the relevant private placement memorandum, together with a formal, independent legal opinion confirming that the memorandum complies with all applicable capital markets laws and regulations;(n) A copy of the applicant's memorandum and articles of association (in draft form for applicants creating a new company) addressing the matters described in AU-5.1.8;(o) [Subparagraph deleted in January 2008]; and(p) [Subparagraph deleted in January 2008].Amended: April 2011
Amended: October 2009
Amended: January 2008
Amended: July 2007AU-5.1.5A
The CBB, in its complete discretion may ask for a guarantee from the applicant's controlling or major shareholders on a case by case basis as it deems appropriate/necessary as part of the required documents to be submitted as mentioned in Paragraph AU-5.1.5 above.
Amended: January 2011
Amended: July 2010
Added: January 2008AU-5.1.6
The business plan submitted in support of an application must include:
(a) An outline of the history of the applicant and its shareholders;(b) The reasons for applying for a license, including the applicant's strategy and market objectives;/div>(c) The proposed type of activities to be carried on by the applicant in/from the Kingdom of Bahrain;(d) The proposed Board and senior management of the applicant and the proposed organisational structure of the applicant;(e) An independent assessment of the risks that may be faced by the applicant, together with the proposed systems and controls framework to be put in place for addressing those risks and to be used for the main business functions; and(f) An opening balance sheet for the applicant, together with a three-year financial projection, with all assumptions clearly outlined, demonstrating that the applicant will be able to meet applicable capital adequacy requirements.Amended: July 2010
Amended: July 2007AU-5.1.7
In the case of applicants seeking to raise capital (refer to AU-5.1.5(m)), the CBB's review is aimed at checking that the proposed private placement complies with applicable capital markets laws and regulations, and that the information contained in the private placement memorandum ('PPM') is consistent with the information provided in the license application. The CBB's review does not in any way constitute an approval or endorsement as to any claims made in the PPM regarding the future value of the company concerned. Note also that the CBB will not license applicants without a core group of sponsoring shareholders (who can demonstrate a strong business track record with relevant expertise), and where failure of the private placement to raise its targeted amount would leave the institution unable to comply with the CBB's minimum capital requirements. The CBB will normally expect core shareholders to account for at least 40% of the applicant's initial proposed total capital.
Amended: July 2007AU-5.1.7A
The PPM must comply with the requirements contained under Module OFS (Offering of Securities) of Volume 6 of the CBB Rulebook and is subject to the CBB's Capital Market Supervision Directorate's prior approval.
Added: October 2014AU-5.1.8
The applicant's memorandum and articles of association must explicitly provide for it to undertake the activities proposed in the license application, and must preclude the applicant from undertaking other regulated services, or commercial activities, unless these arise out of its investment activities or are incidental to those.
Amended: July 2007AU-5.1.9
All documentation provided to the CBB as part of an application for a license must be in either the Arabic or English languages. Any documentation in a language other than English or Arabic must be accompanied by a certified English or Arabic translation thereof.
Amended: July 2007AU-5.1.10
Any material changes or proposed changes to the information provided to the CBB in support of an authorisation application that occurs prior to authorisation must be reported to the CBB.
Amended: July 2007Licensing Process and Timelines
AU-5.1.12
By law, the 60 day time limit referred to in Paragraph AU-5.1.2 only applies once the application is complete and all required information (which may include any clarifications requested by the CBB) and documents have been provided. This means that all the items specified in Rule AU-5.1.5 have to be provided, before the CBB may issue a license.
Amended: July 2007AU-5.1.12A
The CBB recognises, however, that applicants may find it difficult to secure suitable senior management (refer AU-5.1.5(b) above) in the absence of preliminary assurances regarding the likelihood of obtaining a license.
Amended: July 2010
Adopted: July 2007AU-5.1.12B
Therefore, applicants may first submit an unsigned Form 1 in draft, together with as many as possible of the items specified in Rule AU-5.1.5. This draft application should contain at least items AU-5.1.5(a); AU-5.1.5(b), with respect to proposed
Directors (but not necessarily senior management); AU-5.1.5(c); AU-5.1.5(d); and AU-5.1.5(g) to AU-5.1.5(m) inclusive.Amended: July 2010
Adopted: July 2007AU-5.1.12C
On the basis of the information specified in Paragraph AU-5.1.12B, the CBB may provide an initial 'in principle' confirmation that the applicant appears likely to meet the CBB's licensing requirements, subject to the remaining information and documents being assessed as satisfactory. The 'in principle' confirmation will also list all outstanding documents required before an application can be considered complete and subject to formal consideration.
Adopted: July 2007AU-5.1.12D
An 'in principle' confirmation does not constitute a license approval, nor does it commit the CBB to issuing a license. However, it provides sufficient assurance for an applicant to complete certain practical steps, such as securing suitable executive staff that satisfy CBB's 'fit and proper' requirements. Once this has been done, the applicant may finalise its application, by submitting the remaining documents required under Rule AU-5.1.1 and, once assessed as complete by the CBB, a signed and dated final version of Form 1. However, a Bahraini company proposing to undertake financial services activities would not be eligible to obtain a Commercial Registration from the Ministry of Industry and Commerce unless it receives the final approval from the CBB.
Amended: July 2010
Amended: April 2008
Adopted: July 2007AU-5.1.12E
Regardless of whether an applicant submits a draft application or not, all potential applicants are strongly encouraged to contact the CBB at an early stage to discuss their plans, for guidance on the CBB's license categories and associated requirements. The Licensing Directorate would normally expect to hold at least one pre-application meeting with an applicant, prior to receiving an application (either in draft or in final).
Amended: April 2018
Adopted: July 2007AU-5.1.12F
Potential applicants should initiate pre-application meetings in writing, setting out a short summary of their proposed business and any issues or questions that they may have already identified, once they have a clear business proposition in mind and have undertaken their preliminary research. The Central Bank can then guide the applicant on the specific areas in the Rulebook that will apply to them and the relevant requirements that they must address in their application.
Adopted: July 2007AU-5.1.12G
At no point should an applicant hold themselves out as having been licensed by the CBB, prior to receiving formal written notification of the fact in accordance with Rule AU-5.1.12H below. Failure to do so may constitute grounds for refusing an application and result in a contravention of Articles 40 and 41 of the CBB Law (which carries a maximum penalty of BD 1 million).
Adopted: July 2007Granting or Refusal of License
AU-5.1.12H
To be granted a license, an applicant must demonstrate compliance with the applicable requirements of the CBB Law and this Module. Should a license be granted, the CBB will notify the applicant in writing of the fact; the CBB will also publish its decision to grant a license in the Official Gazette and in two local newspapers (one published in Arabic, the other in English). The license may be subject to such terms and conditions as the CBB deems necessary for the additional conditions being met.
Amended: October 2019
Adopted: July 2007AU-5.1.12I
The CBB may refuse to grant a license if in its opinion:
(a) The requirements of the CBB Law or this Module are not met;(b) False or misleading information has been provided to the CBB, or information which should have been provided to the CBB has not been so provided; or(c) The CBB believes it necessary in order to safeguard the interests of potential customers.Amended: October 2019
Adopted: July 2007AU-5.1.12J
Where the CBB proposes to refuse an application for a license, it will give the applicant a written notice to that effect. Applicants will be given a minimum of 30 calendar days from the date of the written notice to appeal the decision, as per the appeal procedures specified in the notice; these procedures will comply with the provisions contained in Article 46 of the CBB Law.
Amended: October 2019
Adopted: July 2007AU-5.1.12K
Before the final approval is granted to a
licensee , confirmation from a retail bank addressed to the CBB that thelicensee's capital (injected funds) — as specified in the business plan submitted under Rule AU-5.1.5) — has been paid in must be provided to the CBB.Added: July 2010Starting Operations
AU-5.1.13
Within 6 months of the license being issued, the new
licensee must provide to the CBB (if not previously submitted):(a) The registered office address and details of premises to be used to carry out the business of the proposedlicensee ;(b) The address in the Kingdom of Bahrain where full business records will be kept;(c) Thelicensee's contact details including telephone and fax number, e-mail address and website;(d) A copy of its business continuity plan;(e) A description of the IT system that will be used, including details of how IT systems and other records will be backed up;(f) A copy of the auditor's acceptance to act as auditor for the applicant;(g) [Sub paragraph deleted July 2010];(h) A copy of thelicensee's professional indemnity insurance policy or confirmation that a deposit to an amount specified by the CBB has been placed in escrow in an account at a bank licensed in the Kingdom of Bahrain (see Section GR-9.1); and(i) A copy of the applicant's notarised memorandum and articles of association, addressing the matters described in Paragraph AU-5.1.8;(j) A copy of the Ministry of Industry and Commerce commercial registration certificate in Arabic and in English;(k) An updated organisation chart showing the reporting lines, committees (if any) and including the names of the persons undertaking thecontrolled functions .(l) A copy of thelicensee's business card and any written communication (including stationery, website, e-mail, business documentation, etc.) including a statement that the investment firm is licensed by the CBB; and(m) Any other information as may be specified by the CBB.Amended: January 2011
Amended: July 2010
Amended: January 2008
Amended: July 2007AU-5.1.14
New licensees must start their operations within 6 months of being granted a license by the CBB, failing which the CBB may cancel the license, as per the powers and procedures set out in Article 48 of the CBB Law.
Amended: July 2007AU-5.2 AU-5.2 Approved Persons
Prior Approval Requirements and Process
AU-5.2.1
Investment firm licensees must obtain CBB's prior written approval before a person is formally appointed to acontrolled function . The request for CBB approval must be made by submitting to the CBB a duly completed Form 3 (Application for Approved Person status) and Curriculum Vitae after verifying that all the information contained in the Form 3, including previous experience, is accurate. Form 3 is available under Volume 4 Part B Authorisation Forms of the CBB Rulebook.Amended: January 2016
Amended: July 2015
Amended: October 2009
July 2007AU-5.2.2
When the request for
approved person status forms part of a license application, the Form 3 must be marked for the attention of the Director, Licensing Directorate. When the submission to undertake acontrolled function is in relation to an existinginvestment firm licensee , the Form 3, except if dealing with a MLRO, must be marked for the attention of the Director, Financial Institutions Supervision Directorate. In the case of the MLRO, Form 3 should be marked for the attention of the Director, Compliance Directorate.Amended: April 2018
Amended: April 2008
Amended: July 2007AU-5.2.3
When submitting Form 3,
investment firm licensees must ensure that the Form 3 is:(a) Submitted to the CBB with a covering letter signed by an authorised representative of theinvestment firm licensee , seeking approval for the proposedcontrolled function ;(b) Submitted in original form;(c) Submitted with a certified copy of the applicant's passport, original or certified copies of educational and professional qualification certificates (and translation if not in Arabic or English) and the Curriculum Vitae; and(d) Signed by an authorised representative of thelicensee and all pages stamped with thelicensee's seal.(e) Submitted with the existing organisation chart or a proposed organisation chart (if the existing organisation chart is to be amended) reflecting the reporting line of the applicant. This is for all controlled functions listed in Rule AU-1.2.2 except a & e.Amended: October 2016
Amended: July 2015
Amended: October 2009AU-5.2.3A
Investment firm licensees seeking to appoint Board Directors must seek CBB approval for all the candidates to be put forward for election/approval at a shareholders' meeting, in advance of the agenda being issued to shareholders. CBB approval of the candidates does not in any way limit shareholders' rights to refuse those put forward for election/approval.Added: July 2015AU-5.2.4
For existing licensees applying for the appointment of a
Director or theChief Executive /General Manager , the authorised representative should be the Chairman of the Board or aDirector signing on behalf of the Board. For all othercontrolled functions , the authorised representative should be theChief Executive /General Manager .Amended: July 2015
Amended: October 2009AU-5.2.5
[This Paragraph was deleted in July 2015.]
Deleted: July 2015AU-5.2.6
[This Paragraph was moved to Paragraph AU-5.2.3A in July 2015.]
Amended: July 2015
Amended: October 2009
Amended: July 2007Assessment of Application
AU-5.2.6A
The CBB shall review and assess the application for
approved person status to ensure that it satisfies all the conditions required in Paragraph AU-3.1.3 and the criteria outlined in Paragraph AU-3.1.5.Amended: January 2016
Added: July 2015AU-5.2.6B
For purposes of Paragraph AU-5.2.6A,
investment firm licensees should give the CBB a reasonable amount of notice in order for an application to be reviewed. The CBB shall respond within 15 business days from the date of meeting all regulatory requirements, including but not limited to receiving the application complete with all the required information and documents, as well as verifying references.Amended: January 2016
Added: July 2015AU-5.2.6C
The CBB reserves the right to refuse an application for
approved person status if it does not satisfy the conditions provided for in Paragraph AU-3.1.3 and does not satisfy the CBB criteria in Paragraph AU-3.1.5. A notice of such refusal is issued by registered mail to thelicensee concerned, setting out the basis for the decision.Amended: January 2016
Added: July 2015AU-5.2.7
[This Paragraph was deleted in January 2016.]
Appeal Process
AU-5.2.7A
Investment firm licensees or the nominatedapproved persons may, within 30 calendar days of the notification, appeal against the CBB's decision to refuse the application forapproved person status. The CBB shall decide on the appeal and notify theinvestment firm licensee of its decision within 30 calendar days from submitting the appeal.Added: July 2015AU-5.2.7B
Where notification of the CBB's decision to grant a person
approved person status is not issued within 15 business days from the date of meeting all regulatory requirements, including but not limited to, receiving the application complete with all the required information and documents,investment firm licensees or the nominatedapproved persons may appeal to the Executive Director, Financial Institutions Supervision of the CBB provided that the appeal is justified with supporting documents. The CBB shall decide on the appeal and notify theinvestment firm licensee of its decision within 30 calendar days from the date of submitting the appeal.Amended: January 2016
Added: July 2015Notification Requirements and Process
AU-5.2.8
Investment firm licensees must immediately notify the CBB when anapproved person ceases to hold acontrolled function together with an explanation as to the reasons why (see Paragraph AU-5.5.5). In such cases, theirapproved person status is automatically withdrawn by the CBB.Amended: October 2009
Amended: July 2008
Amended: April 2008
Amended: July 2007AU-5.2.9
Investment firm licensees must immediately notify the CBB in case of any material change to the information provided in a Form 3 submitted for anapproved person .Amended: October 2009AU-5.2.10
Investment firm licensees must immediately notify the CBB when they become aware of any of the events listed in Paragraph EN-8.2.3, affecting one of theirapproved persons .Amended: October 2009AU-5.3 AU-5.3 [This Section deleted 07/2007]
Deleted: July 2007AU-5.3.1
Persons wishing to be registered as an
administrator must submit a duly completed Form 4 (Application for Registration). The form must be marked for the attention of the Director, Licensing and Policy Directorate.AU-5.3.2
BMA aims to respond to applications for registration within 2 weeks of receipt of a Form 4, although in some cases, where referral to an overseas supervisor is required, the response time is likely to be longer.
AU-5.3.3
All refusals by the BMA to grant a person registered person status have to be reviewed and approved by an Executive Director of the BMA. A notice of intent is issued to the person concerned, setting out the basis for the decision. The person has 30 calendar days from the date of the notice in which to appeal the decision. The BMA then has 30 calendar days from the date of the representation in which to make a final determination. See also Chapter EN-10.
AU-5.4 AU-5.4 Amendment of Authorisation
Licenses
AU-5.4.1
Investment firm licensees wishing to vary the scope of their license must obtain the CBB's written approval, before effecting any such change. Approval must be sought whenever alicensee wishes to add or cease undertaking aregulated investment service , change license category, or to vary a condition imposed on their license.Amended: January 2022
Amended: July 2007AU-5.4.2
Failure to secure the CBB approval prior to effecting such changes is likely to be viewed as a serious breach of a
licensee's regulatory obligations, and may constitute a breach of Article 40(a), as well as Article 50(a), of the CBB Law.Amended: July 2007AU-5.4.3
In addition to any other information requested by the CBB, and unless otherwise directed by the CBB, an
investment firm licensee requesting CBB approval to undertake a newregulated investment service must provide the following documentation:(a) A summary of the rationale for undertaking the proposed new service;(b) A description of how the new service will be managed and controlled; and(c) An analysis of the financial impact of the new service.Amended: July 2007AU-5.4.4
The CBB will only agree to amend a license if doing so poses, in its judgement, no unacceptable risks to customers. As provided for under Article 48 of the CBB Law, the CBB may itself move to amend a license, for instance if a
licensee fails to satisfy any of its existing license conditions or protecting the legitimate interests of customers or creditors of thelicensee requires such a change. See also Chapter EN-7, regarding the cancellation or amendment of licenses, including the procedures used in such instances.Amended: July 2007Approved Persons
AU-5.4.5
Investment firm licensees must seek prior CBB approval before anapproved person may move from onecontrolled function to another within the samelicensee .Adopted: July 2007AU-5.4.6
In such instances, a new Form 3 (Application for Approved Person status) should be completed and submitted to the CBB. Note that a person may be considered ‘fit and proper’ for one
controlled function , but not for another, if for instance the new role requires a different set of skills and experience. Where anapproved person is moving to acontrolled function in anotherlicensee , the firstlicensee should notify the CBB of that person’s departure (see Rule AU-5.5.5), and the newlicensee should submit a request for approval under Rule AU-1.2.1.Adopted: July 2007AU-5.5 AU-5.5 Cancellation of Authorisation
Voluntary Surrender of a License or Closure of a Branch
AU-5.5.1
In accordance with Article 50 of the CBB Law,
investment firm licensees wishing to cancel their license or cease activities for a branch must obtain the CBB's written approval, before ceasing their activities. All such requests must be made in writing to the Director, Financial Institutions Supervision, setting out in full the reasons for the request and how the business is to be wound up.Amended: October 2011
Amended: July 2010
Amended: July 2007AU-5.5.2
Investment firm licensees must satisfy the CBB that their customers' interests are to be safeguarded during and after the proposed cancellation. The requirements contained in Module GR regarding cessation of business must be satisfied.Amended: July 2007AU-5.5.3
Failure to comply with Rule AU-5.5.1 constitutes a breach of Article 50(a) of the CBB Law. The CBB will only approve such a request where it has no outstanding regulatory concerns and any relevant customer interests would not be prejudiced. A voluntary surrender of a license will not be accepted where it is aimed at pre-empting supervisory actions by the CBB. A voluntary surrender will only be allowed to take effect once the
licensee , in the opinion of the CBB, has discharged all its regulatory responsibilities to customers.Amended: January 2011
Amended: July 2007Cancellation of a License by the CBB
AU-5.5.4
As provided for under Article 48(c) of the CBB Law, the CBB may itself move to cancel a license, for instance if a
licensee fails to satisfy any of its existing license conditions or protecting the legitimate interests of customers or creditors of thelicensee requires a cancellation. The CBB generally views the cancellation of a license as appropriate only in the most serious of circumstances, and generally tries to address supervisory concerns through other means beforehand. See also Chapter EN-7, regarding the cancellation or amendment of licenses, including the procedures used in such instances and thelicensee's right to appeal the formal notice of cancellation issued by the CBB.Amended: October 2011
Amended: July 2007AU-5.5.4A
Cancellation of a license requires the CBB to issue a formal notice of cancellation to the
licensee concerned. The notice of cancellation describes the CBB's rationale for the proposed cancellation, as specified in Article 48(d) of the CBB Law.Amended: October 2012
Adopted: October 2011
AU-5.5.4B
Where the cancellation of a license has been confirmed by the CBB, the CBB will only effect the cancellation once a
licensee has discharged all its regulatory responsibilities toclients . Until such time, the CBB will retain all its regulatory powers towards thelicensee and will direct thelicensee so that no newregulated investment services may be undertaken whilst thelicensee discharges its obligations to itsclients .Adopted: October 2011Cancellation of Approved Person Status
AU-5.5.5
In accordance with Paragraph AU-5.2.8,
investment firm licensees must promptly notify the CBB in writing as soon as they become aware, when a person undertaking acontrolled function will no longer be carrying out that function. If acontrolled function falls vacant, theinvestment firm licensee must appoint a permanent replacement (after obtaining CBB approval), within 120 calendar days of the vacancy occurring. Pending the appointment of a permanent replacement, theinvestment firm licensee must make immediate interim arrangements to ensure continuity of the duties and responsibilities of thecontrolled function affected, provided that such arrangements do not pose a conflict of duties. These interim arrangements must be approved by the CBB.Amended: July 2015
Amended: January 2012
Amended: July 2010
Amended: April 2008
Amended: July 2007AU-5.5.6
The explanation given for any such changes should simply identify if the planned move was prompted by any concerns over the person concerned, or is due to a routine staff change, retirement or similar reason.
Amended: July 2007AU-5.5.7
The CBB may also move to declare someone as not 'fit and proper', in response to significant compliance failures or other improper behaviour by that person: see Chapter EN-8 regarding the cancellation of 'fit and proper' approval.
Amended: July 2007AU-5.6 AU-5.6 Publication of the Decision to Grant, Cancel or Amend a License
AU-5.6.1
In accordance with Articles 47 and 49 of the CBB Law, the CBB will publish its decision to grant, cancel or amend a license in the Official Gazette and in two local newspapers, one in Arabic and the other in English.
Amended: October 2019
Added: July 2017AU-5.6.2
For the purposes of Paragraph AU-5.6.1, the cost of publication must be borne by the Licensee.
Added: July 2017AU-5.6.3
The CBB may also publish its decision on such cancellation or amendment using any other means it considers appropriate, including electronic means.
Added: July 2017AU-6 AU-6 License Fees
AU-6.1 AU-6.1 License Application Fees
AU-6.1.1
Applicants seeking an
investment firm license from the CBB must pay a non-refundable license application fee of BD 100 at the time of submitting their formal application to the CBB.Amended: July 2010
Adopted: July 2007AU-6.1.2
There are no application fees for those seeking
approved person status.Adopted: July 2007AU-6.2 AU-6.2 Annual License Fees
AU-6.2.1
Investment firm licensees must pay the relevant annual license fee to the CBB, on the 1st of December of the preceding year for which the fees are due.Amended: July 2013
Adopted: July 2007AU-6.2.2
The relevant fees are specified in Rules AU-6.2.3 to AU-6.2.5 below: different fees are specified for Category 1, Category 2 and
Category 3 investment firms . The fees due on 1st December are those due for the following calendar year, and are calculated on the basis of the firm's latest audited financial statements for the previous calendar year: i.e. the fee payable on 1st December 2013 for the 2014 year (for example) is calculated using the audited financial statements for 2012, assuming a 31st December year end. Where alicensee does not operate its accounts on a calendar-year basis, then the most recent audited financial statements available are used instead.Amended: July 2013
Adopted: July 2007AU-6.2.3
Category 1 investment firms must pay a variable annual licensing fee based on 0.25% of theirrelevant operating expenses , subject to a minimum ('floor') of BD 6,000 and a maximum ('cap') of BD 24,000.Amended: July 2013
Adopted: July 2007AU-6.2.4
Category 2 investment firms must pay a variable annual licensing fee based on 0.25% of theirrelevant operating expenses , subject to a minimum ('floor') of BD 4,000 and a maximum ('cap') of BD 12,000.Amended: July 2013
Adopted: July 2007AU-6.2.5
Category 3 investment firms must pay a variable annual licensing fee based on 0.25% of theirrelevant operating expenses , subject to a minimum ('floor') of BD 1,000 and a maximum ('cap') of BD 4,000.Amended: July 2013
Adopted: July 2007AU-6.2.6
Relevant operating expenses are defined as the total operating expenses of the licensee concerned, as recorded in the most recent audited financial statements available, subject to the adjustments specified in Rule AU-6.2.7.Adopted: July 2007AU-6.2.7
The adjustments to be made to
relevant operating expenses are the exclusion of the following items from total operating expenses:(a) Training costs;(b) Charitable donations;(c) CBB fees paid; and(d) Non-executiveDirectors' remuneration.Adopted: July 2007AU-6.2.8
For the avoidance of doubt, operating expenses for the purposes of this Section, do not include items such as depreciation, provisions, interest expense, and dividends.
Adopted: July 2007AU-6.2.9
The CBB would normally rely on the audited accounts of a
licensee as representing a true and fair picture of its operating expenses. However, the CBB reserves the right to enquire about the accounting treatment of expenses, and/or policies on intra-group charging, if it believes that these are being used artificially to reduce a license fee.Adopted: July 2007AU-6.2.9A
Investment firm licensees must pay a fixed annual fee of BD 1,000 for each locally incorporated SPV in Bahrain which is under the control of and/or providing an actual business function, service or activity (whether actively or passively) for the licensee and/or others at the licensee's direction or having been established under the licensee's direction for that purpose.Adopted: April 2011AU-6.2.9B
The annual fee for SPVs stipulated in Paragraph AU-6.2.9A does not apply to SPVs of
Bahrain domiciled CIUs . In the case ofBahrain domiciled CIUs ,investment firm licensees should refer to the relevant Chapter in Module ARR of Volume 7, depending on the classification of theBahrain domiciled CIU .Amended: July 2013
Added: January 2012AU-6.2.10
Investment firm licensees must complete and submit Form ALF (Annual License Fee) to the CBB, no later than 15th October of the preceding year for which the fees are due.Amended: July 2013
Adopted: July 2007AU-6.2.10A
All licensees are subject to direct debit for the payment of the annual fee and must complete and submit to the CBB a Direct Debit Authorisation Form by 15th September available under Part B of Volume 4 (Investment Business) CBB Rulebook on the CBB Website.
Added: July 2013
AU-6.2.11
For new
licensees , their first annual license fee is payable when their license is issued by the CBB. The amount payable is the floor amount specified for their category of license.Amended: July 2010
Adopted: July 2007AU-6.2.12
For the first full year of operation for
investment firm licensees , thelicensee would calculate its fee as the floor amount. For future years, thelicensee would submit a Form ALF by 15th October of the preceding year for which the fees are due and calculate its fee using its last audited financial statements (or alternative arrangements as agreed with CBB, should its first set of accounts cover an 18-month period).Amended: July 2013
Deleted: July 2010
Adopted: July 2007AU-6.2.13
Where a license is cancelled (whether at the initiative of the firm or the CBB), no refund is paid for any months remaining in the calendar year in question.
Amended: July 2010
Adopted: July 2007AU-6.2.14
Investment firm licensees failing to comply with this Section may be subject to financial penalties for date sensitive requirements as outlined in Section EN-5.3A or may have their licenses withdrawn by the CBB.Added: July 2013Appendix AU-1: Requirements for Regulated Investment Services Involving Crypto Assets
Introducing/Offering Crypto-assets to Clients
1.Licensees must establish a policy which lays down the internal procedure and risk assessment that alicensee must undertake prior to introducing acrypto-asset for trading by its clients. The policy must be approved by the board and reviewed periodically.2. Prior to introducing acrypto-asset , alicensee must notify the CBB of its intent to introduce thecrypto-asset , provide the findings of the risk assessment undertaken in accordance with Point 8 below along with the board resolution approving thecrypto-asset .3.Licensees must provide a list of all thecrypto-assets listed on its platform no later than 10 days from the end of each quarter to the CBB.4.Licensees must have necessary blockchain monitoring capability (e.g. via monitoring systems, internal monitoring control etc.) in place before introducing thecrypto-asset on its platform.5.Licensees must not introducecrypto-assets that facilitates or may facilitate the obfuscation or concealment of the identity of a customer or counterparty orcrypto-assets that are designed to or substantially used to circumvent laws and regulations.Licensees must ensure that they only introducecrypto-assets to which they have in place the necessary AML monitoring capabilities.6.
Licensees must ensure that:(a) any actual or potential conflicts of interest in connection with the review and decision-making process have been assessed and effectively addressed, whether such actual or potential conflicts of interest are related to thelicensee’s board members, shareholders employees, their families, or any other party; and(b) records are maintained of thelicensee’s due diligence of eachcrypto-asset . This includes the final approval for introducing acrypto-asset , the documents the board of directors reviewed including an assessment of all associated material risks in connection with eachcrypto-asset approval or disapproval, such as reviews and sign-offs by various departments of thelicensee , such as the legal, compliance, cybersecurity, and operations department etc.7. Where the CBB determines that undertaking regulated services in acrypto-asset may be detrimental to the financial sector of the Kingdom of Bahrain and/or it may affect the legitimate interest of clients Thelicensees , based on the instruction of the CBB, must remove thecrypto-asset from its platform. In such scenarios, thelicensee shall remain responsible for orderly settlement of trade and any liability arising due to removing thecrypto-asset .Added: January 2024Risk Assessment
8.
Licensees must establish criteria and undertake a comprehensive risk assessment of thecrypto-assets that it intends to offer on its platform. The risks to be assessed must include, but are not limited to, the following:(a)
Licensees must conduct a thorough due diligence process to ensure that thecrypto-asset is created or issued for lawful and legitimate purposes, and not for evading compliance with applicable laws and regulations (e.g., by facilitating money laundering or other illegal activities) and that the process is subject to a strong governance and control framework.Licensees must consider the following factors while undertaking the due diligence:(i) The technological experience, track record and reputation of the issuer and its development team;(ii) The availability of a reliable multi-signature hardware wallet solution;(iii) The protocol and the underlying infrastructure, including whether it is: (1) a separate blockchain with a new architecture system and network or it leverages an existing blockchain for synergies and network effects, (2) scalable, (3) new and/or innovative or (4) thecrypto-asset has an innovative use or application;(iv) The relevant consensus protocol;(v) Developments in markets in which the issuer operates;(vi) The geographic distribution of thecrypto-asset and the relevant trading pairs, if any;(vii) Whether thecrypto-asset has any in-built anonymization functions;(viii)crypto-asset exchanges on which thecrypto-asset is traded.(b) Operational risks associated with acrypto-asset . This includes the resulting demands on thelicensee’s resources, infrastructure, and personnel, as well as its operational capacity for continued client on-boarding and client support based on reasonable forecasts considering the overall operations of thelicensee ;(c) Risks associated with any technology or systems enhancements or modification requirements necessary to ensure timely adoption or offering of any newcrypto-asset ;(d) Risks related to cybersecurity: Whether thecrypto-asset is and will be able to withstand, adapt and respond to, cyber security vulnerabilities, including size, testing, maturity, and ability to allow the appropriate safeguarding of secure private keys;(e) Traceability/Monitoring of thecrypto-asset : Whetherlicensees are able to demonstrate the origin and destination of the specificcrypto-asset , whether thecrypto-asset enables the identification of counterparties to each trade, and whether transactions in thecrypto-asset can be adequately monitored.(f) Market risks, including minimum market capitalisation, price volatility, concentration ofcrypto-asset holdings or control by a small number of individuals or entities, price manipulation, and fraud;(g) Risks relating to code defects and breaches and other threats concerning acrypto-asset and its supporting blockchain, or the practices and protocols that apply to them;(h) Risks relating to potential non-compliance with the requirements of the licensee’s condition and regulatory obligations as a result of the offering of newcrypto-asset ;(i) Legal risks associated with the newcrypto-asset , including any pending or potential civil, regulatory, criminal, or enforcement action relating to the issuance, distribution, or use of the newcrypto-asset ; and(j) Type of distributed ledger: whether there are issues relating to the security and/or usability of a distributed ledger technology used for the purposes of the crypto-asset; whether thecrypto-asset leverages an existing distributed ledger for network and other synergies; whether this is a new distributed ledger that has been demonstrably stress tested.Added: January 2024Periodic Monitoring
9.
Licensees must have policies and procedures in place to monitor thecrypto-assets to ensure that continued use of thecrypto-asset remains prudent. This includes:(a) Periodic re-evaluation ofcrypto-assets , including whether material changes have occurred, with a frequency and level of scrutiny tailored to the risk level of individualcrypto-assets , provided that the frequency of re-evaluation must at a minimum be annual;(b) Implementation of control measures to manage risks associated with individualcrypto-assets ; and(c) The existence of a process for removing ofcrypto-assets on its platform, including notice to affected customers and counterparties.Added: January 2024Disclosure
10.
Licensees must make adequate disclosures, which are easily accessible and prominently visible to clients, for each crypto-asset, containing at a minimum, the following information:(a) Details about the crypto-asset: the type of crypto-asset (payment token, asset token, utility token, stablecoin etc.), its function and details about the asset(s) where acrypto-asset is backed by asset(s);(b) The risks related to the specific crypto-asset such as, but not limited to, price volatility and cyber-security; and(c) Any other information that would assist clients to make an informed investment decision.11. Licensees must prominently display on their platform the following statement, “THE CENTRAL BANK OF BAHRAIN HAS NEITHER REVIEWED NOR APPROVED THE CRYPTO-ASSETS.”Added: January 2024Crypto-asset Custody
12. Alicensee intending to offercrypto-asset custody service must provide to the CBB, for prior written approval, details of custodial arrangement put in place to safeguard, store, hold or maintain custody ofcrypto-assets .13. To the extent alicensee stores, holds, or maintains custody or control ofcrypto-assets on behalf of a client, suchlicensee must holdcrypto-assets of the same type and amount as that which is owed or obligated to such other client.14. Alicensee is prohibited from selling, transferring, assigning, lending, hypothecating, pledging, or otherwise using or encumberingcrypto-assets stored, held, or maintained by, or under the custody or control of, suchlicensee on behalf of a client except for the sale, transfer, or assignment of suchcrypto-asset at the direction of the client.15. Alicensee that undertakescrypto-asset custody service through a third partycrypto-asset custodian , must establish and maintain a system for assessing the appropriateness of its selection of thecrypto-asset custodian and assess the continued appointment of thatcrypto-asset custodian periodically as often as is reasonable. Thelicensee must make and retain a record of the grounds on which it satisfies itself as to the appropriateness of its selection or, following a periodic assessment, continued appropriateness of thecrypto-asset custodian .16. Alicensee that maintains custody or control ofcrypto-assets on behalf of a client must store, at a minimum, 90% of client’scrypto-assets in cold wallets to minimise exposure to losses arising from a compromise or hacking. The requirement to hold 90% of client’scrypto-assets in cold wallet is to be calculated separately for eachcrypto-asset that is offered on thelicensee’s platform and not at aggregate level.17. Alicensee must have a documented policy detailing the mechanism for the transfer ofcrypto-assets between hot, cold and other storage. The scope of authority of each function designated to perform any non-automated processes in such transfers must be clearly specified in the policy document.18. Alicensee that maintains custody or control ofcrypto-assets must not, at any time, permit arrangements whereby just a party or signatory is able to completely authorise the movement, transfer or withdrawal ofcrypto-assets held under custody on behalf of clients. In particular,licensees must not have custody arrangements whereby only a sole person can fully access the private key or keys for the crypto assets held under custody by thelicensee .19.licensees that maintain custody or control ofcrypto-assets are required to have policies and procedures in place that clearly describe the process that will be adopted in the event that the licensee comes to know or suspects that thecrypto-assets it is holding under custody on behalf for clients have been compromised, such as in the event of a hacking attack, theft or fraud. Such policies and procedures must detail the specific steps thelicensee will take to protect client’scrypto-assets in the event of such incidents.Licensees must also have the ability to immediately halt all further transactions with regard to thecrypto-assets .20.licensees must have written procedures for dealing with events such as forks (hard, soft or temporary forks) or air drops from an operational and technical point of view.21. Where a licensee supports a new protocol, it must ensure that changes in the underlying protocol of acrypto-asset that result in a fork are managed and tested proactively. This includes temporary forks which should be managed for reverse compatibility for as long as required. Where alicensee supports a new protocol, alicensee must ensure that their clients are able to deposit and withdrawcrypto-assets in and out of the wallet as and when requested before and after a fork (except during go-live). Clients must be notified well in advance of any periods of time when deposits and withdrawals are not feasible.22. Where the underlying protocol of acrypto-asset is changed, and the older version of thecrypto-asset is no longer compatible with the new version and/or there is an entirely new and separate version of the crypto asset (hard fork),licensees must ensure that client balances on the old version are reconciled with the new version of thecrypto-asset . This includes availability of reverse compatibility for as long as required.Licensees maintain transparent lines of communication with their clients on how they are managing clientscrypto-asset holdings in such a scenario.23. In the case of a hard fork, alicensee , where it supports a new protocol, must proactively manage any discrepancy between the balances recorded on the previous version versus the new version by engaging with the entity which is responsible for updating and supporting the underlying protocol of the relevantcrypto-asset . Additionally,licensees must ensure that, where they seek to offer services in relation to thecrypto-asset associated with the new version of the underlying protocol, this new crypto-asset meets the requirements for acrypto-asset and that they notify the CBB well in advance of offering the new crypto-asset as part of its activities.24. In compliance with Paragraph AU-1.1.22H, when undertaking an appropriate risk assessment of the third party
crypto-asset custodian,licensees should take into account the following:(a) The expertise and market reputation of the third partycrypto-asset custodian, and once acrypto-asset has been lodged by thelicensee with the third partycrypto-asset custodian, thecrypto-asset custodian’s performance of its services to thelicensee ;(b) The arrangements, including cyber security measures, for holding and safeguardingcrypto -assets;(c) An appropriate legal opinion as to the protection ofcrypto-assets in the event of insolvency of the custodian;(d) Whether the third partycrypto-asset custodian is regulated and by whom;(e) The capital or financial resources of the third partycrypto-asset custodian ;(f) The credit rating of the third partycrypto-asset custodian ; and(g) Any other activities undertaken by the third partycrypto-asset custodian and, if relevant, any affiliated company.25.
Licensees should consider, at the minimum, the following two types ofcrypto-asset wallets:(a) Custodial Wallet: the custodial wallet provider holdscrypto-assets (e.g., the private keys) as an agent on behalf of clients and has at least some control over these crypto-assets.Licensees that holdcrypto-assets on behalf of their clients should generally offer custodial wallets and may even offer multi-signature wallets. Clients using custodial wallets do not necessarily have full and sole control over their crypto-assets. In addition, there is a risk that should the custodial wallet provider cease operations or get hacked, clients may lose their crypto-assets; and(b) Non-Custodial (Self-Custody) Wallets: the non-custodial wallet provider, typically a third-party hardware add/or software company, offers the means for each client to hold theircrypto-assets (and fully control private keys) themselves. The non-custodial wallet provider does not control client’scrypto-assets – it is the client that has sole and full control over theircrypto-assets . Hardware wallets, mobile wallets, desktop wallets and paper wallets are generally examples of non-custodial wallets. Clients using non-custodial wallets have full control of and sole responsibility for theircrypto-assets , and the non-custodial wallet provider does not have the ability to effect unilateral transfers of clients’crypto-assets without clients’ authorisation.In addition to the two main crypto-asset wallet types described above, the CBB recognises that there may be alternativecrypto-asset wallet models in existence, or which may emerge in future.Licensees seeking to provide such alternative types ofcrypto-asset wallets and who are unsure of the regulatory obligations they may attract, are encouraged to contact the CBB.Only entities providing the custodial wallets as described in above are considered to be carrying out the regulated activity of safeguarding, storing, holding, maintaining custody of or arranging custody on behalf of clients forcrypto-assets . With respect to the non-custodial wallets as described above, the wallet provider is merely providing the technology; it is the wallet user himself who has full control of and responsibility for hiscrypto-assets .26.Licensees must assess the risks posed to each storage method in view of the new developments in security threats, technology and market conditions and must implement appropriate storage solutions to ensure the secure storage ofcrypto-assets held on behalf of clients. Wallet storage technology and any upgrades should be tested comprehensively before deployment to ensure reliability. Alicensee must implement and must ensure that its third-partycrypto-asset custodian implements, measures to deal with any compromise or suspected compromise of all or part of any seed or private key without undue delay, including the transfer of all clientcrypto-assets to a new storage location as appropriate.27.
Licensees must have, or where thelicensee uses the service of a third partycrypto-asset custodian must ensure that the third party crypto-asset custodian has, adequate processes in place for handling deposit and withdrawal requests forcrypto-asset to guard against loss arising from theft, fraud and other dishonest acts, professional misconduct or omissions. In this regard, alicensee must:(a) continuously monitor major developments (such as technological changes or the evolution of security threats) relevant to allcrypto-assets included for trading. There must be clear processes in place to evaluate the potential impact and risks of these developments, as well as for handling fraud attempts specific to distributed ledger technology (such as 51% attacks), and these processes should be proactively executed;(b) ensure that client IP addresses as well as wallet addresses used for deposit and withdrawal are whitelisted, using appropriate confirmation methods;(c) have clear processes in place to minimise the risks involved with handling deposits and withdrawals, including whether deposits and withdrawals are performed using hot or cold storage, whether withdrawals are processed on a real-time basis or only at certain cut-off times, and whether the withdrawal process is automatic or involves manual authorisation;(d) ensure that any decision to suspend the withdrawal ofcrypto-assets is made on a transparent and fair basis, and is communicated without delay to all its clients; and(e) ensure that the above processes include safeguards against fraudulent requests or requests made under duress as well as controls to prevent one or more officers or employees from transferring assets to wallet addresses other than the client’s designated wallet address.28. A
licensee must at least every calendar month:(a) reconcile allcrypto-assets held by thelicensee , or its third-partycustodian , and reconcile the result to the records of thelicensee ; and(b) reconcile individual client balances with thelicensee’s records ofcrypto-assets balances held in client accounts; and(c) where thelicensee discovers discrepancies after carrying out the above reconciliations, it must maintain a record of such discrepancies and the measures taken to remedy such discrepancies.Added: January 2024Key Management and Wallet Storage
29. Alicensee must establish and document keyman risk management measures that include arrangements in place should individuals holding encryption keys or passcodes to stored assets, including wallets, or information be unavailable unexpectedly due to death, disability or other unforeseen circumstances.30. Alicensee must ensure that it maintains no encrypted accounts that cannot be retrieved in the future for any reason. It must also advise its clients who maintain wallets with firms outside Bahrain (i.e. not CBB licensees) and not licensed by the CBB about any associated risks.31.Licensees must implement robust procedures and protective measures to ensure the secure generation, storage, backup and destruction of both public and private keys.32. In order to access crypto assets, the device on which the private key is held needs access to a network (which, in most cases is through the internet). A wallet where the private key is held on a network attached device is called a hot wallet. Hot wallets are vulnerable to hacking attempts and can be more easily compromised by viruses andmalware .33.Crypto assets that do not need to be immediately available must be held offline, in a ‘cold wallet’.34. Both hot and cold wallets must be password protected and encrypted. The key storage file that is held on the online or offline device must be encrypted. The user is therefore protected against theft of the file (to the degree the password cannot be cracked). However,malware on the machine may still be able to gain access (e.g., a keystroke logger to capture the password).35.Licensees must use multi-signature wallets (e.g., where multiple private keys are associated with a given public key and a subset of these private keys, held by different parties, are required to authorise transactions). Noting that there is no way to recover stolen or lost private keys unless a copy of that key has been made, multi-signature walletsmayoffer more security because a user can still gain access to itscrypto-assets when two or more Private Keys remain available.36. To mitigate the risks associated with hot wallets, private keys can be stored in a cold wallet, which is not attached to a network.
Licensees should implement cold wallet key storage where possible if they are offering wallet services to their Clients.Wallets may also be stored on a secondary device that is never connected to a network. This device, referred to as an air-gapped device, is used to generate, sign, and export transactions. Care should be taken not to infect the air-gapped device withmalware when, for example, inserting portable media to export the signed transactions. Hardware security modules emulate the properties of an air gap. A proper policy must be created to describe the responsibilities, methods, circumstances and time periods within which transactions can be initiated. Access and control of single private keys should be shared by multiple users to avoid transactions by a single user.Some wallet solutions enable cryptographic keys to be derived from a user-chosen password (the “seed”) in a “deterministic” wallet. The most basic version requires one password per key pair. A Hierarchical Deterministic wallet derives a set of keys from a given seed. The seed allows a user to restore a wallet without other inputs.37.Licensees offering deterministic wallet solutions must ensure that users are provided with clear instructions for situations where keys, seeds or hardware supporting such wallet solutions are lost.38. A
licensee must establish and implement strong internal controls and governance procedures for private key management to ensure all cryptographic seeds and private keys are securely generated, stored and backed up. Alicensee using a third party crypto-asset custodian must ensure that the third-party custodian establishes and implements such controls and procedures. These include the following:(a) The generated seed and private key must be sufficiently resistant to speculation or collusion. The seed and private key must be generated in accordance with applicable international security standards and industry best practices, so as to ensure that the seeds (where Hierarchical Deterministic Wallets, or similar processes, are used) or private keys (if seed are not used) are generated in a non-deterministic manner which ensures randomness and thus are not reproducible. Where practicable, seed and private key must be generated offline and kept in a secure environment, such as a Hardware Security Module (HSM), with appropriate certification for the lifetime of the seeds or private keys;(b) Detailed specifications for how access to cryptographic devices or applications is to be authorised, covering key generation, distribution, use and storage, as well as the immediate revocation of a signatory’s access as required;(c) Access to seed and private key relating tocrypto-assets is tightly restricted amongapproved persons , no singleapproved person has possession of information on the entirety of the seed, private key or backup passphrases, and controls are implemented to mitigate the risk of collusion among authorised personnel; and(d) Distributed backups of seed or private key is kept so as to mitigate any single point of failure. The backups need to be distributed in a manner such that an event affecting the primary location of the seed or private key does not affect the backups. The backups should be stored in a protected form on external media (preferably HSM with appropriate certification). Distributed backups should be stored in a manner that ensures seed and private key cannot be regenerated based solely on the backups stored in the same physical location. Access control to the backups needs to be as stringent as access control to the original seed and private key.39.
Licensees must establish, maintain and implement a private key storage policy to ensure effective and prudent safekeeping of the seed and private key at all times. In particular, such policy must address:(a) the keyman risk associated with the storage of seed and private key is appropriately addressed;(b) the seed and private key can be retrieved at a short notice without excessive reliance on one or more individuals who may be unavailable due to death, disability or other unforeseen circumstances; and(c) where alicensee maintains a physical copy of the seed and private key, the physical copies of seed and private key must be maintained in Bahrain in a secure and indestructible manner and the same can be used to access the wallets if need arises.The private key storage policy along with other documents and evidences confirming that the seed and private key are held securely must be made available to the CBB upon request.Added: January 2024Transaction with Counterparties
40.
Licensees must use appropriate technology and wherever appropriate third-party services to identify the situations referred to below, and other additional mitigating or preventive actions as necessary to mitigate the money laundering and terror financing risks involved:(a) the use of proxies, any unverifiable or high-risk IP geographical locations, disposable email addresses or mobile numbers, or frequently changing the devices used to conduct transactions; and(b) transactions involving tainted wallet addresses such as “darknet” marketplace transactions and those involving tumblers.(c) where an applicant’s IP address is masked alicensee must take reasonable steps to unmask the IP address or decline to provide services to that applicant.41.
Licensees must establish and maintain adequate and effective systems and processes, including suspicious transaction indicators to monitor transactions with a client or counterparty involvingcrypto- assets and conduct appropriate enquiry and evaluation of potentially suspicious transactions identified. In particular:(a) identify and prohibit transactions with wallet addresses or their equivalent which are compromised or tainted; and(b) employ technology solutions which enable the tracking ofcrypto-assets through multiple transactions to more accurately identify the source and destination of thesecrypto-assets .For the purposes of (b), a wallet address is compromised or tainted where there is reasonable suspicion that it is used for the purpose of conducting fraud, identity theft, extorting ransom or any other criminal activity.Alicensee should take reasonable measures to avoid transactions with anothercrypto-asset entity, infrastructure or service provider where the counterparty is unknown or anonymous (e.g., via certain peer to peer or decentralised exchanges) at any stage of its business process.Added: January 2024Disclosure to Clients
42. As part of establishing a relationship with a
client , and prior to entering into an initial transaction with such client,licensee must disclose in clear, conspicuous, and legible writing in both Arabic and English languages, all material risks associated withcrypto-asset products and services including at a minimum, the following:(a) acrypto-asset is not a legal tender and is not backed by the government;(b) legislative and regulatory changes or actions at national level or international level may adversely affect the use, transfer, exchange, and value ofcrypto-assets ;(c) transactions incrypto-assets may be irreversible, and, accordingly, losses due to fraudulent or accidental transactions may not be recoverable;(d) somecrypto-asset transactions may be deemed to be made when recorded on a public ledger, which is not necessarily the date or time that theclient initiates the transaction;(e) the value ofcrypto-assets may be derived from the continued willingness of market participants to exchangefiat currency forcrypto-asset , which may result in the potential for permanent and total loss of value of a particularcrypto-asset should the market for thatcrypto-asset disappear;(f) the volatility and unpredictability of the price ofcrypto-assets relative tofiat currency may result in significant loss over a short period of time;(g) cybersecurity risks associated withcrypto-assets including the risk of partial or full loss of crypto-assets in the event of a cyber-attack, and measures that have been put in place to mitigate the cyber security risks;(h) the nature ofcrypto-assets means that any technological difficulties experienced by thelicensee may prevent the access or use of a client’scrypto-assets ;(i) any investor protection mechanism;(j) the rights and entitlements of aclient when events such as, but not limited to, forks and airdrops occur;(k) how they execute and routeclient’s order and source liquidity (e.g. whether they pass or route orders to an exchange to execute). Where thelicensee routesclient orders to one or more crypto-asset exchanges for execution, it must disclose details of all the crypto-asset exchanges; and(l) how it determines the prices of thecrypto-assets it quotes to clients.Added: January 2024Prevention of Fraud
43.
Licensees must take reasonable steps to detect and prevent fraud, including by establishing and maintaining a written anti-fraud policy. The anti-fraud policy must, at a minimum, include:(a) the identification and assessment of fraud-related risk areas;(b) procedures and controls to protect against identified risks;(c) allocation of responsibility for monitoring risks and establish real-time/near real-time fraud risk monitoring and surveillance system; and(d) procedures for the periodic evaluation and revision of the anti-fraud procedures, controls, and monitoring mechanisms.44. Licensees must, as a minimum, have in place systems and controls with respect to the following:
(a) Crypto-asset Wallets: Procedures describing the creation, management and controls of crypto-asset wallets, including:
(i) wallet setup/configuration/deployment/deletion/backup and recovery;(ii) wallet access privilege management;(iii) wallet user management;(iv) wallet Rules and limit determination, review and update; and(v) wallet audit and oversight.(b) Private keys: Procedures describing the creation, management and controls of private keys, including:
(i) private key generation;(ii) private key exchange;(iii) private key storage;(iv) private key backup;(v) private key destruction; and(vi) private key access management.(c) Origin and destination of
crypto-assets : Systems and controls to mitigate the risk of misuse ofcrypto-assets , setting out how:(i) the origin ofcrypto-asset is determined, in case of an incoming transaction; and(ii) the destination ofcrypto-asset is determined, in case of an outgoing transaction.Added: January 2024Professional Indemnity Insurance
45.
Licensees must ensure that professional indemnity insurance, inter alia:(a) Covers any legal liability in consequence of any negligent act, error or omission in the conduct of thelicensee’s business by thelicensee or any person employed by it or otherwise acting for it, including consultants under a contract for service with thelicensee ;(b) Covers legal defence costs which may arise in consequence of any negligent act, error or omission in the conduct of thelicensee’s business by thelicensee or any person employed by it or otherwise acting for it, including consultants under a contract for service with thelicensee ;(c) Covers any legal liability in consequence of any dishonest, fraudulent, criminal or malicious act, error or omission of any person at any time employed by thelicensee , or otherwise acting for it, including consultants under a contract for service with thelicensee ; and(d) Covers loss of and damage to documents and records belonging to the licensee or which are in the care, custody or control of thelicensee or for which thelicensee is responsible; including also liability and costs and expenses incurred in replacing, restoring or reconstructing the documents or records; including also consequential loss resulting from the loss or damage to the documents or records.Added: January 2024