On August 16, 2018, Banco Central do Brasil (BCB), Brazil’s central bank, published Circular no. 3.909, which applies to payment institutions authorised by the BCB and contains provisions on cybersecurity policy. The new policy provides further requirements for organisations when hiring data facility services such as cloud data processing, storage and computing services.