One of the key principles of Luxembourg financial regulation is the obligation of professional secrecy ("banking secrecy") laid down in Article 41 of the 1993 Financial Sector Act (a similar obligation exists for insurance companies). Outsourcing arrangements and especially IT outsourcing operations which can lead to the disclosure of confidential data and thus to a potential breach of the "banking secrecy", are subject to rather strict conditions.