The German Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht – BaFin) recently commented on the ever increasing relevance of IT-security and IT-compliance for financial service providers. Within the comments, BaFin referenced new legal requirements as well as new guidance. Over the last couple of days, BaFin also launched a public consultation on its