CMF Proposes Updates to Financial Institutions’ Outsourcing Regulations

Whereas the latest regulatory updates from the Comisión para el Mercado Financiero (CMF) are centered in Chile, the ripples of these policy shifts are felt far beyond South American borders, particularly in global financial hubs like Miami, Florida. For the many international banking firms, fintech innovators, and payment processors operating out of Brickell Avenue—often called the “Wall Street of the South”—these changes in how financial institutions manage the outsourcing of services are not just foreign news. they are operational blueprints. When a major regulator like the CMF modernizes its requirements for the externalization of services, it signals a broader international trend toward tightening the leash on third-party risk management, a move that directly impacts the compliance frameworks of Miami-based entities managing cross-border portfolios.

The Shift Toward Lifecycle Risk Management

The CMF has recently opened a six-week public consultation period regarding a proposed modification to Chapter 20-7 of the Recopilación Actualizada de Normas para bancos (RAN). This isn’t a mere clerical update. The core objective is to modernize the requirements for the outsourcing of services and to implement a more rigorous system for periodic information reporting. By focusing on the “lifecycle” of third-party relationships, the CMF is aligning itself with the most recent international approaches to operational risk. This means that the risk isn’t just assessed at the time of signing a contract; it must be managed from the initial selection of the provider through to the termination of the service.

This regulatory push is specifically targeted at a wide array of financial actors: banks, savings and credit cooperatives, non-bank card issuers, payment card operating companies, and support societies. The goal is to strengthen the availability of systematized information regarding providers, ensuring that the regulator has a clear view of who is actually performing the critical functions of the financial system. In the context of Miami’s dense concentration of financial services, this mirrors the scrutiny seen from U.S. Bodies like the Federal Reserve or the Office of the Comptroller of the Currency (OCC), where the focus on “concentration risk”—the danger of too many banks relying on the same cloud provider or software vendor—has become a top priority.

Expanding the Scope: From Banks to Insurers

this is part of a larger, phased effort by the CMF. Looking back to August 2025, the commission had already put forward a project regarding the operational risk management system for insurance and reinsurance companies. That proposal established minimum requirements for identifying, evaluating, and monitoring risks derived from outsourcing. By extending these principles to banks and payment operators in April 2026, the CMF is creating a comprehensive web of oversight that covers the entire financial ecosystem. This systemic approach ensures that whether a company is an insurer or a payment processor, the standard for “due diligence” remains consistently high.

For professionals in the Miami area, particularly those dealing in regulatory compliance services, this underscores the importance of “operational resilience.” The CMF’s move to incorporate modern definitions and guidelines for third-party risk is a response to the reality that financial institutions are now essentially a collection of integrated third-party services. When a service provider fails, the institution fails. This “second-order” effect is exactly why the CMF is demanding more systematized data on providers—to prevent a single point of failure from triggering a systemic crisis.

Navigating the Third-Party Risk Landscape in Miami

Given my background in analyzing financial infrastructure and regional economic trends, these international shifts create a demand for specialized local expertise. If your firm operates in the Miami area and manages partnerships with Latin American financial institutions, you cannot afford to treat “outsourcing” as a simple procurement task. It is now a core component of your risk management strategy. To stay ahead of these trends, you require a multidisciplinary approach to governance.

If these regulatory trends are impacting your operations in South Florida, I recommend engaging with three specific types of local professionals to ensure your framework is robust enough to meet both domestic and international standards:

Third-Party Risk Management (TPRM) Consultants

Look for specialists who don’t just provide a checklist, but who can build a “lifecycle” management program. You need experts capable of performing deep-dive due diligence on vendor stability, cybersecurity posture, and business continuity plans. The ideal consultant should have experience mapping dependencies to identify if multiple clients are relying on the same fragile sub-provider.

International Regulatory Compliance Attorneys

You need legal counsel that understands the intersection of U.S. Law and the specific mandates of foreign regulators like the CMF. Ensure they have a track record of drafting “right-to-audit” clauses and service level agreements (SLAs) that satisfy the stringent reporting requirements now being requested by international commissions.

Operational Risk Auditors

Seek out auditors who specialize in “systematized information.” Since the CMF is emphasizing the need for better data on providers, your internal audits should focus on how your data is stored and reported. A professional auditor will help you move from manual spreadsheets to automated risk dashboards that can be exported for regulatory review at a moment’s notice.

The evolution of these norms suggests that the era of “set it and forget it” outsourcing is over. Whether you are operating out of a high-rise in Brickell or a tech hub in Coral Gables, the ability to demonstrate active, ongoing oversight of your third-party ecosystem is now a prerequisite for doing business in the global financial market.

Ready to find trusted professionals? Browse our complete directory of top-rated financial consultants experts in the Miami area today.