Outsourcing ICT activities in the bank sector are subject to particular regulation and require even more prudence when it comes to topics of liability, privacy, auditing and compliance. The article wants to give an overview of the principles and law applicable to the outsourcing activities as well from the point of the consumer, of the financial institution as from a point of view of the service provider offering and executing the outsourcing.