CACEIS October 2025


CONTENT

CACEIS

EUROPEAN UNION

ALTERNATIVE PRODUCTS

ESMA publishes Final Report on the Draft Regulatory Technical Standards on open-ended loan-originating AIFs under the AIFMD

CACEIS

BACKGROUND

On 21 October 2025, the ESMA published Final Report on the Draft Regulatory Technical Standards on open-ended loan-originating AIFs under the AIFMD.

On 12 December 2024, ESMA launched a public consultation on draft Regulatory Technical Standards (RTS) for open-ended loan-originating alternative investment funds (OE LO AIFs) under the AIFMD. The consultation closed on 12 March 2025 and attracted 18 responses from asset managers, investment firms, industry associations, and one consumer association.

WHAT'S NEW?

After reviewing stakeholder feedback, ESMA introduced several key amendments to the draft RTS:

  • Liquidity management: The original draft required AIFMs to define a “target appropriate amount” of liquid assets that OE LO AIFs should hold to meet redemption requests. Respondents argued this approach was too rigid and did not reflect the specific liquidity characteristics of loan-originating funds, which rely on the liquidity generated by their loan portfolios rather than by maintaining cash buffers. Many also warned that the requirement could negatively affect fund performance. ESMA agreed and removed this fixed liquidity threshold. Instead, AIFMs must ensure their funds have sufficient liquidity to meet redemption requests, giving managers discretion to align liquidity management with the fund’s structure and underlying assets..
  • Stress testing: ESMA initially proposed that AIFMs perform liquidity stress tests quarterly. Respondents considered this overly burdensome and misaligned with the long-term nature of loan-originating strategies. ESMA adjusted the requirement to a minimum of once per year, providing flexibility for AIFMs to perform more frequent tests if appropriate.
  • Clarified scope and authorisation: Several stakeholders flagged ambiguity in the reference to AIFMs that “intend to manage” OE LO AIFs, which could be read as implying a pre-authorisation requirement. ESMA replaced the phrase with “AIFMs that manage” to clarify that no additional authorisation is required at the EU level for managers already authorised under AIFMD. However, ESMA acknowledged that some Member States may still impose pre-authorisation requirements for certain OE LO AIFs under national law.

WHAT'S NEXT?

ESMA has submitted the final draft RTS to the European Commission for adoption. The Commission must decide within three months whether to adopt the RTS, with the option to extend the review period by one month.

 

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

EBA publishes Report on Competent Authorities' approaches to the anti-money laundering and countering the financing of terrorism supervision of banks

CACEIS

On 8 October 2025, the EBA published Report on Competent Authorities' approaches to the anti-money laundering and countering the financing of terrorism supervision of banks.

The EBA published a Report that takes stock of the actions taken by all competent authorities to address the EBA’s findings and recommendations. This follows in - depth reviews carried out by the EBA of all 40 competent authorities approaches to tackling money laundering and terrorist financing (ML/TF) risks in banks in all EU/ EEA Member States over the last 6 years, issuing recommendations when necessary to improve the effectiveness of anti-money laundering and counter terrorism financing (AML/CFT) supervision.

Overall, competent authorities have made significant progress over the past six years in adopting a risk-based approach to AML/CFT supervision. Despite the challenges which, in some cases, hampered their reform efforts, most competent authorities now have dedicated AML/CFT strategies, targeted supervisory plans, and manuals that guide supervisors and ensure consistency across the sector. They are also cooperating more effectively with relevant stakeholders at both national and international level. Looking ahead, the new EU Anti-Money Laundering Authority (AMLA) will benefit from the EBA’s work that has been instrumental in making AML/CFT supervision in the EU more effective.

In relation to AML/CFT supervision, competent authorities have taken notable steps to align national strategies and practices with the EBA standards. The findings suggest that supervisory manuals have been enhanced to ensure that AML/CFT supervision becomes more consistent and effective, and that most supervisors have taken significant steps to use all supervisory tools available to them in a more strategic way. However, in several cases, work is still underway to address recommendations stemming from these reviews.

Competent authorities also made substantial efforts to strengthen coordination and information exchange with the relevant public authorities within their respective Member States, such as competent authorities with shared supervisory responsibilities, the financial intelligence unit and tax authorities. The Report also highlights significant progress in relation to establishing sound and effective communication with competent authorities in other EU jurisdictions or third countries. Nevertheless, in some Member States, further improvement is needed, for example in relation to effective cooperation mechanisms with prudential supervisors.

 

EBA publishes report on tackling ML TF risks in crypto-asset services through supervision

CACEIS

On 9 October 2025, the EBA published report on tackling ML TF risks in crypto-asset services through supervision - lessons learned from recent cases.

The EBA has played a key role in strengthening the AML/CFT regulatory and supervisory framework for crypto-assets in the EU since 2018, when certain crypto-asset businesses were first brought within the EU framework. Through continuous engagement and cooperation with national supervisors, the European Supervisory Authorities (ESAs), and third-country authorities, the EBA has gathered critical insights into the operations and risks of crypto-asset businesses, both before and after the implementation of the Markets in Crypto-Assets Regulation (MiCA). This has enabled the EBA to identify significant AML/CFT vulnerabilities across the sector and to provide targeted guidance to improve compliance and oversight.

The Report is intended to inform supervisory approaches to the authorisation and oversight of crypto-asset service providers (CASPs) and issuers and to strengthen AML/CFT frameworks. It summarises lessons learnt from actions taken by competent authorities and the EBA in identifying and managing ML/TF risks associated with crypto-asset businesses, both prior to and immediately after the implementation of the new regulatory framework. It also describes strategies used by some CASPs and issuers to sidestep national AML/CFT supervision, highlights the safeguards introduced by MiCA and the revised AML/CFT regime, and identifies key elements that will underpin the effective application of the new EU framework.

By consolidating these findings, the Report supports the effective implementation of MiCA and the enhanced AML/CFT framework, while promoting a robust and forward-looking approach to tackling financial crime risks in the sector.

 

DIGITAL ASSETS

EU publishes Commission Delegated Regulation 2025/1264 on RTS for Liquidity Management Policies of Asset-Referenced and E-Money Token Issuers

CACEIS

On 3 October 2025, the EU published Commission Delegated Regulation (EU) 2025/1264 of 27 June 2025 supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council with regard to regulatory technical standards specifying the minimum contents of the liquidity management policy and procedures for certain issuers of asset-referenced tokens and e-money tokens.

Pursuant to Article 35(4) and Article 58 of Regulation (EU) 2023/1114, the requirements laid down in Article 45(3) of that Regulation apply not only to issuers of significant asset referenced tokens, but also to electronic money institutions issuing significant e-money tokens and, where required by their competent authorities, to issuers of asset referenced tokens that are not significant and to electronic money institutions issuing e-money tokens that are not significant.

In accordance with Regulation (EU) 2023/1114, the Commission is to specify the minimum contents of the liquidity management policy and procedures for managing the liquidity risk of issuers of asset-referenced tokens or e-money tokens ensuring that the value of the reserve of assets can meet requests for redemption by holders of such tokens under normal and stress scenarios ensuring the normal continuity of the business. In order to meet requests for redemption, issuers of asset-referenced tokens or e-money tokens should pay particular attention to the volatility of the assets referenced relative to the reserve of assets and should perform a subsequent analysis of the necessary overcollateralisation. To mitigate any counterparty risk, issuers of asset-referenced tokens or e-money tokens should avoid risks of concentration of the custodians of the reserve of assets.

In order to ensure the reserve assets have a resilient liquidity profile that enables issuers of asset-referenced tokens or e-money tokens to continue operating normally also under scenarios of liquidity stress, a detailed description of the risks covered, the parameters identified and their calibration for the purposes of testing scenarios of liquidity stress, should be included in the liquidity management policy. The review of that information, which should be updated for each liquidity stress testing exercise, is expected to allow supervisors to decide on appropriate measures to strengthen the issuers’ liquidity requirements if necessary.

This Regulation is based on the draft regulatory technical standards, developed in close cooperation with the European Securities and Markets Authority, submitted to the Commission by the European Banking Authority.

This Regulation enters into force on 24 October 2025.

 

DIGITAL OPERATIONAL RESILIENCE

ESMA publishes Compliance table on the Joint Guidelines on costs and losses under DORA

CACEIS

On 6 October 2025, ESMA published its Compliance Table for the Joint Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents under DORA (EU) 2022/2554. The Guidelines set a common EU/EEA method for supervisors to collect and assess the annual financial impact of major ICT incidents reported by financial entities.

Key points

  • Broad compliance across the EU/EEA: Most national competent authorities (AMF, BaFin, FSMA, CSSF, CNMV, CBI, CONSOB, MFSA, etc.) confirm compliance and have integrated the Guidelines into their supervisory processes.
  • Pending implementation:
    - Romania, Iceland, and Norway intend to comply once national DORA-implementing measures are completed.
    - Cyprus and Portugal are non-compliant by default pending designation of their DORA competent authority.
    - Hungary has not responded.
  • Several authorities note the publication of the Guidelines on their websites or their integration into existing ICT incident reporting frameworks (e.g., SREP questionnaires, national procedures).

The Guidelines ensure consistent, EU-wide estimation and reporting of ICT incident-related costs and losses, supporting harmonised supervisory oversight under DORA

 

ESMA publishes Compliance table on the Joint Guidelines on oversight cooperation under DORA

CACEIS

On 6 October 2025, ESMA published its Compliance Table for the Joint Guidelines on oversight cooperation under DORA (JC/GL/2024/36). The document summarises which competent authorities comply or intend to comply with the Guidelines governing cooperation and information exchange between national authorities and the ESAs.

Key points

  • The Guidelines entered into application on 17 January 2025.
  • Certain provisions apply later:
    - Guideline 5.1 (reporting) becomes applicable from 30 April 2025, when the first reporting cycle starts.
    - Guideline 1.6 (use of secure tool) becomes applicable once the ESAs deploy the secure communication tool in Q3 2025.

Compliance status

  • Most EU/EEA competent authorities comply, including the AMF, BaFin, FSMA, CSSF, CNB, CNMV, CONSOB, MFSA, Bank of Lithuania, Central Bank of Ireland, and others.
  • Authorities generally indicate that the Guidelines have been integrated into supervisory practices, published on their websites, or supported by specific national decisions or procedures.
  • Some authorities intend to comply, pending national legislative steps or internal procedure finalisation:
    - Hungary (MNB) – preparing internal procedures; aims to comply by 30 June 2025.
    - Poland (KNF) – full compliance dependent on adoption of national legislation enabling DORA oversight powers.
    - Iceland – awaiting incorporation of DORA into national law.
  • Cyprus and Portugal – non-compliance by default, pending official designation of the national DORA competent authority.
  • Norway – no reply.

These Guidelines support DORA's framework for coordinated oversight of ICT third-party providers and information sharing among supervisors, ensuring a harmonised cooperation structure across the EU/EEA.

 

FINTECH / REGTECH / BIGTECH / SUPTECH

EC publishes Amendment of the Digital Europe Programme and work programme 2025-2027

CACEIS

On 6 October 2025, the EC published Amendment of the Digital Europe Programme and work programme 2025-2027.

This Work Programme (WP) 2025-2027 of the Digital Europe Programme (DIGITAL) is the last one for the duration of the Multiannual Financial Framework 2021-2027.

It is focused on accomplishing and on ensuring the sustainability of the actions that have been started and pursued under the previous WPs, such as different data spaces, bringing them from the preparatory to deployment phase.

It also continues to further the EU’s goals in digital transformation as defined in the communication 2030 Digital Compass: The European way for the Digital Decade and in the Path to the Digital Decade policy programme.

 

OTHER - OTHER

EC publishes its 2026 Commission work programme

CACEIS

On 21 October 2025, the EC published its 2026 Commission work programme.

The 2026 European Commission Work Programme, sets out a comprehensive agenda focused on securing Europe's sovereignty, competitiveness, and unity in a rapidly changing global environment. It emphasizes the need for Europe to control its own future by protecting its citizens, economy, environment, and democratic values.

The programme aims to boost sustainable prosperity by supporting industrial sectors, fostering innovation, and deepening the Single Market to ease business operations and financing for all companies, including startups and SMEs. Key legislative initiatives include the European Innovation Act, Cloud and AI Development Act, Quantum Act, and advanced materials legislation, all designed to strengthen digital and technological sovereignty. It also plans to establish a Critical Raw Materials Centre to secure essential supplies for industry.

Energy policy prioritizes lowering costs for households and businesses through an improved Energy Union, upgrading infrastructure, and promoting clean energy and fusion power as part of climate goals. Europe will accelerate the development of clean technologies and enhance sustainable markets through a Circular Economy Act and Clean Industrial Deal, supporting sectors such as aviation.

The defence and security agenda focuses on integrating and strengthening the European defence industry, supporting Ukraine, enhancing border security, and tackling migrant smuggling with sanctions and operational support from agencies like Frontex. Migration policies will apply the Pact on Migration and Asylum to ensure fair and firm management.
Social policies will safeguard Europe’s social model by proposing a Quality Jobs Act, initiatives for fair labour mobility, affordable housing, and an EU Anti-poverty strategy, along with efforts to empower youth and promote intergenerational fairness.

Food security and environmental protection remain key priorities, with measures to strengthen farmers’ competitiveness, ensure fair trading practices, promote sustainable fisheries and aquaculture, implement a Water Resilience Strategy, and address climate-related risks like wildfires while investing in natural capital.

Democracy and rule of law will be reinforced through an annual rule of law cycle, support for independent media and journalistic freedom via a Media Resilience Programme, protection against online harms and cyberbullying, and new anti-corruption and anti-fraud strategies. Equality efforts include a Gender Equality Strategy and updated disability rights initiatives.

On the global stage, the programme seeks to translate new trade frameworks into concrete opportunities while maintaining support for Ukraine and regional partners. It includes a Pact for the Mediterranean to foster partnerships in investment, energy, security, and migration, along with strategies for the Middle East and humanitarian aid reform.

The programme commits to simplification of EU laws to reduce administrative burdens, especially for SMEs, by 25% overall and 35% specifically for smaller businesses, ensuring legislation is lighter, clearer, and easier to implement. It also proposes withdrawal of outdated legislative proposals to maintain focus on priorities.

 

OWN FUNDS

EU publishes Commission Delegated Regulation 2025/1265 on RTS for Identifying Main Risk Drivers and Long/Short Positions under CRR

CACEIS

On 14 October 2025, the EU publishes Commission Delegated Regulation (EU) 2025/1265 of 1 July 2025 supplementing Regulation (EU) No 575/2013 of the European Parliament and of the Council with regard to regulatory technical standards specifying the method for identifying the main risk driver of a position and for determining whether a transaction represents a long or a short position as referred to in Articles 94(3), 273a(3) and 325a(2).

The size of the business constitutes a proxy for the degree of sophistication that institutions should have in their capital calculations. To determine whether institutions are allowed to use simplified methods for the calculation of own funds requirements for market and counterparty credit risks, they are required to calculate the size of the on- and off-balance-sheet business in accordance with Article 94(1), Article 273a(1) and (2), and Article 325a(1) of Regulation (EU) No 575/2013. The identification of the main risk driver of a position and, on that basis, the determination of whether a transaction represents a long or a short position, are fundamental for the correct calculation of the size of the business. Given the importance of those calculations for small and non-complex institutions, the method for identifying the main risk driver of a position and for determining whether a transaction represents a long or a short position should be proportionate to the degree of complexity of the institution.

To produce accurate results, the method for identifying the main risk driver of a non-derivative position should be based on the calculation of the risk-weighted delta sensitivities to risk factors, as set out in Part Three, Title IV, Chapter 1a, Sections 2, 3 and 6 of Regulation (EU) No 575/2013. In addition, to ensure the consistency of the approach, the method for identifying the main risk driver of a position should be consistent with the method for identifying the primary risk driver and the most material risk driver in derivative transactions set out in Delegated Regulation (EU) 2021/931.

It is necessary to lay down a simplified approach for small and non-complex institutions that may not be able to calculate the risk-weighted delta sensitivities, or may not be able to use the methods for identifying the primary risk driver and the most material risk driver in derivative transactions set out in Delegated Regulation (EU) 2021/931. That simplified approach should be suitable for the instruments that small and non-complex institutions normally trade. Larger institutions should also have the possibility to use that simplified approach where they trade simple instruments that are included in the scope of that simplified approach.

The simplified approach should lead to results that are consistent with the risk-weighted delta sensitivities approach.
Nevertheless, simplifying assumptions should be introduced to reduce the computational and operational burden for institutions, in particular with regard to instruments denominated in a currency that is different from the institution’s reporting currency. For that reason, institutions should be allowed to disregard in the determination of the main risk driver the spot exchange rate between the currency in which the instrument is denominated and the institution’s reporting currency for stocks, bonds and derivative transactions the underlying of which would normally be allocated to the interest rate, credit, equity or commodity risk categories.

Cash positions in the reporting currency should not be taken into account when determining the size of the business, since they do not change their market value under the influence of changes to risk drivers.

This Regulation enters into force on 4 November 2025.

 

REPORTING

EU publishes Commission Implementing Regulation (EU) 2025/2159 of 27 October 2025 amending the implementing technical standards laid down in Implementing Regulation (EU) 2021/2284 as regards supervisory reporting and disclosures of investment firms

CACEIS

BACKGROUND

On 31 October 2025, the EU published Commission Implementing Regulation (EU) 2025/2159 of 27 October 2025 amending the implementing technical standards laid down in Implementing Regulation (EU) 2021/2284 as regards supervisory reporting and disclosures of investment firms.

This regulation updates reporting and disclosure rules for investment firms under Regulation (EU) 2019/2033. It mainly affects firms other than small and non-interconnected firms. The amendments align investment firms’ reporting with the revised prudential framework introduced by Regulation (EU) 2024/3117, clarify own funds requirements for market risk, and set minimum precision for monetary data points. The regulation also provides updated templates and instructions for quarterly reporting and ensures consistency with credit institutions’ reporting where applicable.

WHAT'S NEW?

This regulation updates reporting and disclosure rules for investment firms to align them with recent changes in prudential requirements:

  • Investment firms must follow revised templates and instructions from Implementing Regulation (EU) 2024/3117 for supervisory reporting.
  • First quarterly reports for reference dates between January and April 2026 are due by 30 June 2026.
  • Reporting on counterparty credit and credit valuation risk aligns with credit institutions, while own funds requirements for market risk (K-NPR) remain specific to investment firms.
  • Minimum precision for monetary data points is now set at ten thousand units.
  • Amendments ensure consistency with credit institutions’ reporting where frameworks overlap, and set specific rules where differences exist.
  • Annexes X and XI provide updated templates and instructions for quarterly reporting.

WHAT'S NEXT?

The regulation enters into force 20 days after its publication in the Official Journal of the EU.

Member States must apply it in full and ensure direct applicability to relevant investment firms.

 

REPORTING & DISCLOSURES

EP publishes on approved Draft Rules for Simplified Sustainability Reporting and Due Diligence

CACEIS

On 13 October 2025, the EP published on approved Draft Rules for Simplified Sustainability Reporting and Due Diligence.

The European Parliament’s Legal Affairs Committee has approved plans to significantly reduce the scope and complexity of sustainability reporting and due diligence obligations for companies across the European Union. The goal is to cut administrative burdens, strengthen competitiveness, and support Europe’s green transition.

Main changes:

  • The new draft rules aim to limit mandatory reporting to larger companies with over 1,000 employees and a net annual turnover exceeding €450 million, making reporting for smaller firms voluntary.
  • Similarly, due diligence duties on human rights and environmental impacts will mainly apply to large companies with over 5,000 employees or significant turnover, adopting a risk-based approach.
  • The revised rules also exclude EU-level civil liability for breaches, emphasizing national law enforcement while ensuring victims receive full compensation.

 

SECONDARY MARKET/TRADING

EC publishes Commission Delegated Regulation (EU) supplementing Regulation (EU) No 648/2012 on RTS for Operational Conditions, Representativeness, and Reporting under the Active Account Requirement

On 29 October 2025, the EC published Commission Delegated Regulation (EU) supplementing Regulation (EU) No 648/2012 of the European Parliament and of the Council with regard to regulatory technical standards specifying the operational conditions, the representativeness obligation and the reporting requirements related to the active account requirement.

The act operationalises EMIR 3’s requirement that certain financial and non-financial counterparties exposed to clearing services of substantial systemic importance at third-country CCPs maintain an operational and representative active account at EU CCPs. Chapter I sets operational conditions: legal/IT connectivity, policies and procedures for active accounts, capacity to support large flows and shifts of cleared positions, annual stress testing, and written statements evidencing clearing capacity thresholds and time-to-scale. Chapter II defines representativeness: minimum trades to be cleared at EU CCPs across specified subcategories for EUR interest rate OTC derivatives, PLN interest rate OTC derivatives, and EUR short-term interest rate derivatives, with reference periods calibrated by portfolio size and selection of most relevant subcategories based on existing clearing at systemically important services. Chapter III sets semi-annual reporting: aggregate thresholds, operational condition attestations, representativeness metrics and subcategory selections, templates, timing (end-January and end-July), and first-report deferral to at least six months after entry into force. Annexes list derivative classes/subcategories and reporting templates. The Delegated Regulation enters into force 20 days after publication in the Official Journal and applies directly across Member States.

 

SETTLEMENT

ESMA publishes Final Report on amendments to the RTS on Settlement Discipline

CACEIS

BACKGROUND

On 13 October 2025, the ESMA published its Final Report on amendments to the RTS on Settlement Discipline, which supplements the CSDR.

The report responds to the mandate given under CSDR Refit (Regulation (EU) 2023/2845) to develop regulatory technical standards that improve settlement discipline and efficiency across the EU. It builds on the consultation launched in February 2025 and on ESMA’s broader work on shortening the settlement cycle to T+1, for which 11 October 2027 has been recommended as the EU go-live date.

The amendments aim to:

  • Increase settlement efficiency and reduce settlement fails,
  • Prepare markets operationally for T+1, and
  • Limit unnecessary administrative and IT burden on CSDs and market participants.

WHAT'S NEW?

1. Earlier and more precise allocations and confirmations

ESMA proposes that professional clients must provide allocations and confirmations to investment firms no later than 23:00 CET on trade date (T), replacing the vaguer concept of “close of business”.

At the same time, ESMA stresses that allocations and confirmations should be sent as early as possible intraday, to avoid a concentration of messages at the end of the day and to support straight-through processing in a T+1 environment.

2. Machine-readable, standardised communications

The Final Report introduces a clear move to fully electronic, structured and machine-readable formats for allocations and confirmations. Investment firms must require their (professional) clients to provide all reference data necessary to settle a trade in standardised, electronic formats and to keep these data updated.

ESMA also makes open international communication procedures and standards (e.g. ISO-based messaging) compulsory for exchanging allocations and confirmations, to promote interoperability and automation across markets and infrastructures.

3. Stronger alignment between allocations, settlement instructions and transaction types

The RTS amendments refine the content of allocations and settlement instructions so they better match each other:

  • Allocations must be aligned with the matching fields of settlement instructions.
  • The place of settlement (PSET) becomes a mandatory field in allocations and settlement instructions, reducing mis-routing and matching issues.
  • ESMA introduces a specific transaction type for buy-sell back and sell-buy back transactions, which must be identified in allocations and in the settlement reporting templates.

In addition, CSD participants will have to use a field indicating the place of trading, allowing settlement fails to be monitored and analysed by trading venue.

4. Timing for sending settlement instructions

ESMA requires that settlement instructions (SIs) be sent to the securities settlement system “as soon as possible” and at the latest by 23:59 CET on trade date.

This is intended to ensure that all instructions are in the system ahead of the first settlement runs, giving CSDs and intermediaries maximum time to resolve mismatches or funding issues before intended settlement date.

5. Mandatory CSD functionalities: hold & release, auto-partial settlement and auto-collateralisation

The report repeals Article 12 of the current RTS and thereby removes the possibility for certain CSDs to derogate from key functionalities. Instead:

  • Hold & release becomes a mandatory functionality for all CSDs, allowing participants to put instructions on hold and to release them totally or partially.
  • Auto-partial settlement must be offered by all CSDs and should be the default setting, unless a participant explicitly opts out.
  • Auto-collateralisation (automatic intraday credit secured by eligible collateral) must be provided by CSDs that do not themselves hold a banking licence, so participants can obtain intraday liquidity to support timely settlement.
  • CSDs must provide real-time gross settlement (RTGS) and/or at least three daily batch settlement windows, increasing flexibility for participants to complete settlement within T or T+1.

These tools are seen as critical enablers of high settlement efficiency in a T+1 environment.

6. Enhanced monitoring, reporting and disclosure of settlement fails

ESMA reshapes the settlement-fails reporting regime to make it more risk-focused and granular:

  • Instead of merely reporting the “top 10” failing participants in absolute terms, CSDs will highlight systemically important participants, ranked by failure rates relative to their overall activity.
  • CSD participants will need to provide reason codes for settlement fails so that CSDs can identify root causes.
  • CSDs must disaggregate data by type of financial instrument, by place of trading, and report the average duration of settlement fails, weighted by value.
  • The obligation to submit a separate annual report on settlement fails is removed, since equivalent information will already be available in monthly reports.

On the transparency side, CSDs will have to publish settlement-fails statistics by instrument type and include the main reasons for fails and measures envisaged to address them, improving information available to regulators and market participants.

7. Additional tools – no regulatory action for now

ESMA also assessed additional tools to improve settlement efficiency – such as unique transaction identifiers (UTI), shaping, automated securities lending, and alignment of CSD opening hours and cut-off times. For the time being, ESMA concludes that no further regulatory mandates are needed, but encourages industry-led solutions and best practices in these areas.

8. Phased implementation towards T+1

To avoid overloading CSDs and market participants, ESMA proposes staggered application dates for different groups of requirements:

  • 7 December 2026 – earlier pre-settlement processes: tighter deadlines and electronic standards for allocations, confirmations and SIs start to apply, allowing market participants to test their T+1 workflows in advance.
  • 1 July 2027 – enhanced settlement-fails reporting and disclosure obligations begin, so ESMA and the Commission have robust data both before and after the T+1 go-live.
  • 11 October 2027 – IT-intensive CSD tools (hold & release, auto-partial settlement, auto-collateralisation, RTGS / multiple batches) become applicable, coinciding with the move to T+1.

WHAT'S NEXT?

ESMA has submitted the draft amended RTS to the European Commission, which has three months to decide whether to endorse them.

In parallel, ESMA “strongly encourages” CSDs, market infrastructures, intermediaries and their clients to treat these RTS amendments as a core component of their T+1 transition programmes, integrating the new timing requirements, electronic standards and CSD functionalities into their post-trade roadmaps.

For banks, investment firms and asset managers, this means that projects on T+1, settlement efficiency, messaging upgrades and fails-management should now be planned with these RTS changes in mind, to avoid duplicate work and to be ready ahead of the key milestones in 2026–2027.

 

ESMA publishes its Final Reports on the RTS on CCPs authorisations, extensions of authorisation and model validations, following the review of the EMIR 3

CACEIS

On 9 October 2025, the ESMA published its Final Reports on the RTS on CCPs authorisations, extensions of authorisation and model validations, following the review of the EMIR 3.

EMIR 3 introduces several measures to make EU clearing services and EU CCPs more efficient and competitive, notably by streamlining and shortening supervisory procedures for initial authorisations, extensions of authorisation and validations of changes to models and parameters.

The two sets of RTS specify:
1. the conditions a legal person intending to provide clearing services as central counterparty (CCP) shall fulfill for extensions of authorisation and the list of required documents and information to provide, and
2. the conditions CCPs must fulfill to obtain validation of the changes of their models (e.g., to calculate its margin requirements, default fund contributions, collateral requirements and other risk control mechanisms), including parameters and the list of required documents and information to apply for such changes.

ESMA conducted public consultations on the draft RTS in Q1 2025. The Final Reports consider the feedback received.

 

EU publishes Regulation (EU) 2025/2075 of the European Parliament and of the Council of 8 October 2025 amending Regulation (EU) No 909/2014 as regards a shorter settlement cycle in the Union

CACEIS

BACKGROUND

On 14 October 2025, the EU published Regulation (EU) 2025/2075 of the European Parliament and of the Council of 8 October 2025 amending Regulation (EU) No 909/2014 as regards a shorter settlement cycle in the Union.

Currently, most transactions in transferable securities settle within two business days (T+2). Longer settlement cycles increase counterparty, liquidity, and operational risks and tie up capital unnecessarily. Major non-EU markets are moving to a one-business-day cycle (T+1) or even same-day settlement, creating a misalignment with EU practices. ESMA’s 2024 assessment concluded that shortening the EU cycle would reduce risks, improve market efficiency, harmonise corporate event standards, and help EU markets stay globally competitive.

WHAT'S NEW?

The regulation introduces key changes to the EU settlement cycle to reduce risk and improve alignment with global markets.

  • Shorter settlement cycle: The mandatory settlement period for transactions in transferable securities executed on trading venues is reduced from T+2 to T+1. This aligns EU markets with global trends, reduces counterparty and operational risks, and frees up capital that would otherwise be used for margin calls.
  • Exemptions: Certain transactions are excluded from the T+1 requirement. These include privately negotiated trades executed on a trading venue, bilateral trades reported to a trading venue, first-time book-entry recordings, and specific securities financing transactions, such as securities lending, buy-sell back, sell-buy back, or repurchase transactions, provided they are documented as single transactions composed of two linked operations. Margin lending transactions remain outside the scope of T+1.
  • Reporting and monitoring: Updates to Articles 74 and 75 introduce enhanced reporting requirements, including transaction categories, intended settlement dates, and whether transactions are executed on trading venues. ESMA and the Commission will monitor settlement efficiency and assess the market impact of exemptions. If significant settlement fails occur, the Commission may temporarily adjust related delegated regulations or take other proportionate measures to limit financial or operational consequences.

WHAT'S NEXT?

The Regulation will apply from 11 October 2027. Member States must implement it fully and directly. ESMA will increase monitoring of settlement efficiency ahead of and after the transition to T+1, particularly for exempted securities financing transactions.

 

SUPERVISION

EBA publishes ESAs’ Joint Committee Work Programme for 2026

CACEIS

On 16 October 2025, the EBA published ESAs’ Joint Committee publishes Work Programme for 2026.

The upcoming Programme aims to strengthen the financial system’s digital operational resilience, ensure the continued protection of consumers, and identify risks that could undermine financial stability.

More specifically, the ESAs will undertake joint work in 2026 to:

  • ensure the effective operation of the Oversight Framework for critical third-party ICT providers under the Digital Operational Resilience Act (DORA);
  • perform joint risk analyses amid ongoing geopolitical tensions and heightened uncertainties;
  • further financial education and consumer protection in the EU’s financial sector, including within the context of the European Commission’s Savings and Investments Union (SIU) initiative;
  • monitor developments on the securitisation market;
  • collaborate on other cross-sectoral matters such as financial conglomerates, innovation facilitators and credit assessment institutions;
  • and support the planned review of the Sustainable Finance Disclosure Regulation (SFDR).

 

EBA publishes its 2026 Work Programme

CACEIS

On 1 October 2025, the EBA published its Work Programme outlining the key priorities and initiatives for 2026.

The 2026 Work Programme builds around three priorities:

  • i) developing a rulebook which contributes to an efficient, resilient and sustainable single market;
  • ii) performing risk assessments with tools, data and methodologies which support effective analysis, supervision and oversight;
  • iii) tackling innovation to enhance the technological capacity of all stakeholders.

2026 will mark an important milestone for the EBA, as the Authority will embark on its oversight and supervisory functions arising from new responsibilities over critical third-party providers (DORA), issuers of crypto assets (MICA), and the use of initial margin models (EMIR). On the other hand, the anti-money laundering and countering the financing of terrorism (AML/CFT) responsibilities it has exerted since 2020 will have been transferred to the newly established Anti-Money Laundering Authority (AMLA).

 

EC publishes letter from the Commission to the ESAs on the de-prioritisation of Level 2 acts in financial services legislation

CACEIS

On 6 October 2025, the EC published letter from the Commission to the ESAs on the de-prioritisation of Level 2 acts in financial services legislation.

The EU has a comprehensive legal framework, in which many of the rules are regulatory and implementing standards (Level 2) that supplement or specify the EU Regulations and Directives (Level 1). In the last legislature, level 1 acts empowered the Commission to adopt around 430 level 2 measures.

A high volume of level 2 acts can lead to compliance costs and regulatory complexity for stakeholders, while demanding significant resources from co legislators to scrutinise them. In consultation with the EU co legislators, the Commission informed the three European Supervisory Authorities and the Anti Money laundering Authority (AMLA) that it will not adopt these non essential acts before 1 October 2027. Where empowerments have legal deadlines, the Commission will propose to amend or repeal them during the upcoming revisions of the relevant Level 1 acts.

 

ESMA publishes its 2026 Work Programme

CACEIS

On 3 October 2025, the ESMA published its 2026 Annual Work Programme.

In 2026, ESMA will continue to build on existing priorities, supporting the forthcoming strategic developments set out by the Commission’s Saving and Investments Union (SIU) Strategy. This includes aligning supervisory practices across Member States, enhancing market data capabilities, and actively contributing to upcoming reforms designed to create a more integrated and globally competitive EU financial system. ESMA also aims at seizing opportunities arising from digitalisation, for example by facilitating the simplification and use of clear language in disclosures.

ESMA’s activities will remain closely aligned with the agenda of the European Commission and co-legislators, maintaining the agility needed to address evolving regulatory, economic, and technological landscapes. This responsiveness is crucial as volatility, uncertainty, and rapid change shape the global environment and impact EU financial markets. Given the significance of the forthcoming proposals under the Savings and Investments Union, ESMA stands ready to provide its technical expertise and support to the preparation and implementation of the new legislative files that will be launched.

ESMA will focus on enhancing data capabilities and promoting innovation across the EU financial sector. Key projects for 2026 include the rollout of the ESMA Data Platform, centralisation studies, and the development of AI-powered supervisory tools. These initiatives will bring common benefits to both ESMA and the National Competent Authorities, improving market efficiency and transparency through the support that data provides for risk-based and data-driven supervision across Europe.

In the digital finance sector ESMA will continue to focus on the effective implementation of MiCA, as it is key to ensuring investor protection and the orderly functioning of crypto-asset markets. ESMA’s supervisory convergence efforts will remain focused notably on the authorisation and supervision of CASPs.

Finally, in line with the EU’s ambition to accelerate the settlement cycle to T+1 by 11 October 2027, ESMA will also coordinate closely with market participants to ensure the smooth transition and preparedness of the financial sector for this event.

 

EU publishes Regulation 2025/2088 Amending Multiple EU Regulations on Reporting Requirements for Financial Services and Investment Support Programs

CACEIS

BACKGROUND

On 21 October 2025, the European Union published Regulation (EU) 2025/2088 of the European Parliament and of the Council of 8 October 2025 on certain reporting requirements in the fields of financial services and investment support. The Regulation amends several core legislative acts in the financial and investment sectors — including Regulations (EU) No 1092/2010, 1093/2010, 1094/2010, 1095/2010, 806/2014, 2021/523 and 2024/1620. The objective is to streamline and modernise reporting and disclosure requirements across the EU financial framework.

The reform aims to reduce the administrative burden on institutions and authorities while preserving data quality and supervisory effectiveness. It introduces cross-sectoral rules to encourage information sharing between EU and national authorities, strengthen the “report once” principle, and prepare the ground for a future integrated EU reporting system.

WHAT'S NEW?

The Regulation standardises and simplifies reporting obligations under the ESAs (EBA, EIOPA, ESMA), the ESRB, the SRB, the ECB in its supervisory role, and the new AMLA.

1. Streamlined reporting and information sharing

The ESAs, ESRB, SRB, ECB and AMLA are now required to share supervisory information—either regularly or on request—with other competent authorities entitled to receive it under EU law. Authorities must, where possible, reuse existing data rather than collect it again directly from financial institutions, reducing duplication and costs.

The Regulation also allows these authorities to enter into memoranda of understanding (MoUs) to define technical arrangements for data exchange, promote interoperability, and coordinate collection efforts. Information can be shared in anonymised or aggregated form to ensure compliance with data protection and confidentiality rules.

2. Reuse of supervisory data for innovation and research

Supervisory authorities may, under strict safeguards, grant access to anonymised data for legitimate research or innovation purposes, allowing fintechs, researchers or market participants to use supervisory data while protecting confidentiality and personal data.

3. Periodic review of redundant reporting requirements

The ESAs and AMLA must regularly review existing reporting and disclosure requirements to identify obsolete or disproportionate obligations. They are empowered to issue opinions suggesting amendments to streamline EU and national frameworks, feeding into potential legislative changes proposed by the European Commission.

4. Integrated reporting framework and “single contact point”

By November 2030, the ESAs, through their Joint Committee, must present a feasibility study and roadmap for establishing a cross-sectoral integrated reporting system covering all EU financial sectors. This will include a common data dictionary and a shared EU data space for supervisory information.
In parallel, a permanent single contact point will be set up to allow entities to report duplicative or obsolete obligations directly to supervisors.

5. Simplified InvestEU reporting

The frequency of reporting by implementing partners under the InvestEU Regulation (EU) 2021/523 is reduced from biannual to annual, easing the burden on financial intermediaries and SMEs without changing substantive monitoring requirements.

WHAT'S NEXT?

The Regulation entered into force on 10 November 2025.
EU supervisory authorities and financial institutions shall have by now:

  • Review and adapt their reporting and data-sharing frameworks;
  • Implement procedures to comply with the “report once” principle;
  • Prepare for future integration into the EU-wide reporting system expected by 2030.

This reform marks a significant step toward a more efficient, consistent, and data-driven EU supervisory landscape, balancing regulatory oversight with administrative simplification.

 

SUSTAINABLE FINANCE / GREEN FINANCE

EU publishes Council Decision 2025/2131 on EU Position in EEA Joint Committee Regarding Amendment to Annex IX (Financial Services – European Green Bonds)

CACEIS

On 21 October 2025, the EU publishes Council Decision (EU) 2025/2131 of 13 October 2025 on the position to be adopted, on behalf of the European Union, within the EEA Joint Committee concerning the amendment to Annex IX (Financial services) to the EEA Agreement (European Green Bonds).

The Agreement on the European Economic Area (the ‘EEA Agreement’) entered into force on 1 January 1994.

Pursuant to Article 98 of the EEA Agreement, the EEA Joint Committee may decide to amend, inter alia, Annex IX (Financial services) to the EEA Agreement.

Regulations (EU) 2023/2631 and (EU) 2023/2869 of the European Parliament and of the Council should be incorporated into the EEA Agreement.

Annex IX (Financial services) to the EEA Agreement should therefore be amended accordingly.

The position of the Union within the EEA Joint Committee should therefore be based on the attached draft Decision.

BELGIUM

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

NBB publishes circulars implementing EBA Guidelines on internal controls for national and EU restrictive measures

CACEIS

BACKGROUND

On 15 October 2025, the National Bank of Belgium (NBB) issued two circulars integrating the European Banking Authority’s (EBA) guidelines on internal controls for the implementation of national and EU restrictive measures. These circulars ensure that Belgian financial institutions and service providers adopt robust governance and compliance arrangements to prevent sanctions breaches and circumvention.

Both circulars enter into force on 30 December 2025, and institutions under NBB supervision are expected to implement the EBA requirements as part of their prudential and AML/CFT frameworks.

WHAT'S NEW?

1. Governance and control measures for financial institutions

The first circular (NBB_2025_12) transposes the EBA Guidelines EBA/GL/2024/14 into the NBB’s prudential supervision framework. It applies to credit institutions, investment firms, payment and e-money institutions, and financial or mixed holding companies, including certain non-EEA branches operating in Belgium.

Institutions must integrate sanctions compliance into their governance structures and risk management processes. Key expectations include:

  • The appointment of a senior manager responsible for ensuring compliance with restrictive measures;
  • Regular assessments of exposure to sanctions and the risk of circumvention;
  • Maintenance of effective internal policies and controls to ensure timely and accurate application of restrictive measures;
  • Ongoing training for staff on sanctions implementation.

The NBB underlines that investment firms and holding companies are included in scope because they face similar risks of sanctions circumvention as banks and payment institutions.

2. Screening and monitoring for payment and crypto-asset transfers

The second circular (NBB_2025_13) implements the EBA Guidelines EBA/GL/2024/15, which detail the obligations of payment service providers and crypto-asset transfer service providers under Regulation (EU) 2023/1113 on information accompanying transfers of funds and crypto-assets.

These entities must establish internal systems capable of:

  • Identifying individuals or entities subject to restrictive measures;
  • Reviewing and analysing alerts generated by sanctions screening;
  • Suspending or blocking transfers and freezing assets or crypto-assets where necessary;
  • Regularly reviewing and updating their policies and screening tools to ensure ongoing effectiveness.

The NBB integrates these obligations into its AML/CFT supervision, stressing the need for reliable and consistent implementation across all payment and crypto-transfer channels.

WHAT'S NEXT?

Both circulars apply from 30 December 2025. The NBB expects financial institutions, payment providers and crypto-asset service providers to use the coming months to adapt their governance, screening and control systems to the EBA standards.

From that date onward, the NBB will monitor compliance as part of its regular prudential and AML/CFT supervision, treating sanctions implementation as a key element of sound governance and financial integrity.

 

ESG RISK MANAGEMENT

NBB publishes circular on implementing the EBA Guidelines on ESG risk management

CACEIS

BACKGROUND

On 8 October 2025, the National Bank of Belgium (NBB) issued Circular NBB_2025_11, implementing the EBA Guidelines (EBA/GL/2025/01) of 8 January 2025 on the management of environmental, social and governance (ESG) risks.

The circular applies to Belgian credit institutions, financial holding companies, mixed financial holding companies, and large investment firms. It aims to integrate the EBA Guidelines into the Belgian supervisory framework and to clarify the NBB’s supervisory expectations, particularly for less significant institutions (LSIs).

The circular also recommends that significant institutions (SIs) under ECB supervision follow its provisions if the ECB does not issue equivalent guidance.

WHAT'S NEW?

The circular sets out the NBB’s expectations regarding the identification, measurement, management, and monitoring of ESG risks, in line with CRD VI requirements.

It recognises that ESG risks, particularly environmental risks, can have a significant impact on financial soundness by influencing credit, market, liquidity, and operational risks. Institutions are therefore expected to:

  • Integrate ESG considerations into their governance, risk management, and strategic planning frameworks;
  • Develop internal processes and risk control mechanisms consistent with the EBA Guidelines;
  • Incorporate ESG risk assessments into the plans required under Article 76(2) of CRD VI, ensuring resilience over the short, medium, and long term.

The circular also emphasises proportionality, allowing small and non-complex institutions to:

  • Use simplified methodologies and assumptions;
  • Rely on fewer data and indicators;
  • Apply lighter approaches to scenario analysis and prudential planning.

WHAT'S NEXT?

The circular enters into force on 11 January 2026, with an extended application date until 11 January 2027 for small and non-complex institutions.

Institutions are expected to begin preparing by aligning their risk management frameworks and governance processes with the EBA Guidelines. The NBB will likely review compliance through ongoing supervision and thematic reviews.

 

OTHER - OTHER

Belgium publishes Act amending several provisions to implement Regulation (EU) 2024/886 on instant euro transfers and transpose Directive (EU) 2024/1174 on minimum own funds and eligible liabilities

CACEIS

On the 6 October 2025, the Belgium published Act amending several provisions to implement Regulation (EU) 2024/886 on instant euro transfers and transpose Directive (EU) 2024/1174 on minimum own funds and eligible liabilities.

The law published in the Moniteur belge on 6 October 2025 implements into Belgian legislation provisions of two key European Union texts, Regulation (EU) 2024/886 on instant euro payments and Directive (EU) 2024/1174 on minimum own funds and eligible liabilities. It was adopted by the Belgian Chamber of Representatives and ratified by King Filip, aligning national law with the latest European reforms in the fields of payments and financial stability.

The first part of the law amends the Law of 28 April 1999 on settlement finality in payment and securities settlement systems and the Law of 11 March 2018 on the status and supervision of payment institutions and electronic money institutions. These amendments implement the rules of Regulation (EU) 2024/886, introducing mandatory instant transfers in euro and expanding the definition of institutions eligible to participate in designated payment systems. The law establishes detailed governance, internal control, and ICT requirements consistent with the Digital Operational Resilience Act to ensure the integrity and stability of payment systems.

The law also strengthens the supervisory role of the National Bank of Belgium. It creates a new framework governing participation in payment systems, including rules for safeguarding customer funds, setting internal control mechanisms, and establishing resolution plans to guarantee the continuity of payment services in case of insolvency. The National Bank is responsible for granting and withdrawing authorisations and for maintaining a public register of authorised payment and e-money institutions.

The second part of the law transposes Directive (EU) 2024/1174, which revises the EU’s bank resolution framework. It modifies the Law of 25 April 2014 on the legal status and supervision of credit institutions by introducing specific rules for so-called liquidation entities, meaning institutions that are intended to be wound up rather than resolved. The law clarifies the treatment of minimum capital and eligible liabilities requirements for these entities and allows the resolution authority to set proportional obligations based on financial stability considerations.

It entered into force on the 6 October 2025.

 

Chambre des représentants de Belgique publishes draft law transposing MiCA and TRF, MiFID III and laying down miscellaneous financial provisions

CACEIS

On the 9 October 2025, the Chambre des représentants de Belgique published draft law implementing Regulations (EU) 2023/1114 (MiCA) and 2023/1113 (TFR) and laying down miscellaneous financial provisions.

The draft law aims to implement in Belgian law the provisions of Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA) and Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets (TFR). Submitted by the Belgian government to the Chamber of Representatives, this legislative proposal establishes the national framework for regulating crypto-asset activities, ensuring alignment with the EU’s evolving digital finance architecture.

The draft law is divided into six books. Main ones focus on the following:

  • Book II represents the core of the text, transposing the MiCA and TFR Regulations. It defines the categories of crypto-assets, electronic money tokens, asset-referenced tokens, and other crypto-assets as well as sets out a detailed provisions governing their issuance, public offerings, trading, and related service activities. It designates the National Bank of Belgium, the Financial Services and Markets Authority, and the FPS Economy as the competent authorities responsible for supervision and enforcement, depending on the nature of the activity. The law introduces prudential, conduct-of-business, and disclosure requirements, including rules on white papers, licensing of crypto-asset service providers, and market abuse prevention.
  • Book III transposes Directive (EU) 2024/790, which amends the MiFID II framework on markets in financial instruments, adapting Belgian law to the updated European regulatory structure. This draft law transposes y faithfully the directive, which in fact left no options for the Member States.
  • Book IV strengthens the powers and operational scope of financial mediation services, enhancing dispute resolution mechanisms for consumers and financial institutions.
  • Book V introduces various complementary financial provisions. It partially implements Directive (EU) 2024/1640 on anti-money-laundering (AML) and counter-terrorist-financing (CFT) mechanisms on the mechanisms to be put in place by Member States to prevent the use of the financial system for money laundering or terrorist financing. More specifically, the it related to the operating procedures of the UBO register and how the UBO register functions (following the 2022 Court of Justice of the EU decision). Book V also transposes Regulation (EU) 2024/886 on instant euro payments, particularly to provide effective, proportionate, and dissuasive sanctions for violations of the provisions inserted into the SEPA Regulation by the IPR Regulation.

BRAZIL

FINANCIAL INSTRUMENTS

ANBIMA publishes Rules and Procedures Complementing the Code of Administration and Management of Third-Party Resources

CACEIS

BACKGROUND

On 13 October 2025, ANBIMA (the Brazilian Financial and Capital Markets Association) published the updated Rules and Procedures Complementing the Code of Administration and Management of Third-Party Resources (Código AGRT). This document establishes the operational, governance, and transparency framework applicable to institutions involved in fiduciary administration, asset management, and wealth management activities in Brazil.

The publication follows ANBIMA’s continuous effort to enhance self-regulation and to align its framework with the broader objectives of CVM Resolution 175, which seeks to promote greater transparency, investor protection, and market consistency across investment products. The new version of the Rules and Procedures replaces and consolidates previous operational manuals, incorporating recent regulatory developments and the growing complexity of investment activities, including digital assets and ESG integration.

The revised framework will enter into force on 3 November 2025, coinciding with the launch of the new ANBIMA HUB platform, which will centralize the submission of segregated fee information for investment funds.

WHAT'S NEW?

The document introduces a comprehensive structure covering all core operational aspects of third-party asset management, complementing the principles of the AGRT Code with mandatory technical and governance standards.

It sets out detailed valuation methodologies (apreçamento) applicable to all types of financial assets, defining the hierarchy of pricing sources, methods for illiquid and complex instruments, and governance mechanisms to ensure independence and accuracy. Institutions must maintain valuation manuals registered with ANBIMA, describing all methodologies used, review procedures, and approval hierarchies. Any deviation from these methodologies must be justified and documented.

The Rules strengthen organizational independence between trading, valuation, and control functions. Institutions must establish dedicated pricing committees or equivalent governance bodies, with regular meetings and documented decisions to oversee valuation and risk control processes.

In the area of risk and liquidity management, the document introduces detailed provisions for stress testing, limit monitoring, and liquidity analysis. It requires the implementation of governance structures capable of identifying, measuring, and mitigating market, credit, and operational risks across investment vehicles.

A key innovation lies in the inclusion of an extensive chapter on cryptoassets (criptoativos). The Rules define the concepts, classifications, and responsibilities associated with cryptoasset services, including custody, trading, and transfer. Institutions must assess technological, legal, and market risks, perform due diligence on tokens and transactions (“Know Your Token” and “Know Your Transaction”), and ensure traceability and security of custody arrangements (“Wallet custody”). The framework also sets transparency standards for disclosure of cryptoasset exposures to investors.

The new version expands and harmonizes sector-specific annexes, each detailing requirements for different types of investment vehicles:

  • Anexo I – Wealth management activities (Gestão de Patrimônio Financeiro);
  • Anexo II – Managed portfolios (Carteiras Administradas);
  • Anexo III – All fund categories, including transparency on fees and remuneration;
  • Anexos IV–VIII – Specific frameworks for structured funds such as FIFs, FIDCs, FIIs, ETFs, and FIPs.

These annexes address matters such as valuation, governance, credit risk management, voting policies, ESG integration, and data reporting obligations to ANBIMA’s central database.

In line with CVM Resolution 175, the Rules introduce enhanced transparency on fund fees. Managers adopting a “global fee” structure must disclose segregated remuneration components through the new ANBIMA HUB, replacing the current Remuneration Summary (Sumário de Remuneração). The transition period for funds established before 3 November 2025 has been extended to 31 March 2026, and institutions may include a temporary clause in their fund regulations indicating that segregated fee data remain accessible through managers’ websites until the new transparency platform becomes fully operational.

WHAT'S NEXT?

The new Rules and Procedures applies from 3 November 2025, with transitional deadlines extending into early 2026 to allow institutions to adapt their internal processes, systems, and disclosures.

In practice, asset managers, administrators, and custodians will need to:

  • Review and update valuation manuals and governance frameworks to comply with the new methodological requirements.
  • Adjust risk and liquidity management policies to align with ANBIMA’s prescribed standards and documentation duties.
  • Integrate cryptoasset governance and transparency measures, ensuring compliance with due diligence and custody obligations.
  • Prepare for centralized fee reporting through the ANBIMA HUB platform, ensuring data accuracy and investor access to remuneration information.

By introducing these comprehensive updates, ANBIMA seeks to reinforce Brazil’s self-regulatory standards, align with international best practices, and provide investors with greater clarity, reliability, and comparability of fund management practices across the capital markets.

The new framework consolidates ANBIMA’s role as a cornerstone of Brazil’s financial market governance, bridging regulatory expectations with evolving financial innovation and investor protection needs.

 

OTHER - GOVERNANCE & ORGANISATION

ANBIMA publishes updated on Certifications Rules and Procedures

CACEIS

BACKGROUND

On 9 October 2025, ANBIMA published an updated version of the Rules and Procedures of Certification (Regras e Procedimentos de Certificação), which will enter into force on 2 January 2026.

Approved by the Forums of Mutual Funds Management, Structured Funds Management, and Distribution, the Rules define the self-regulatory framework for the certification of professionals involved in the distribution of investment products, fund management, fiduciary administration, and portfolio management. They complement the Distribution Code and the Code of Administration and Management of Third-Party Resources (Código AGRT), ensuring that professionals engaged in Brazil’s financial markets meet high standards of technical competence, ethics, and transparency.

This update aligns ANBIMA’s certification model with the new distribution certification structure to be implemented in 2026, reflecting market developments and the broader transparency and suitability objectives of CVM Resolution 175.

WHAT'S NEW?

1. New certification structure

The new Rules replace the CPA-10, CPA-20, and CEA certifications with a restructured model comprising three credentials: CPA, C-Pro R, and C-Pro I.

The CPA (Certificação Profissional ANBIMA) becomes the entry-level certification, aimed at professionals who distribute investment products directly to retail or corporate clients through any channel. These professionals may receive subscription or redemption orders, respond to client inquiries, and refer clients to higher-certified professionals holding C-Pro R.

2. Relationship-level certification (C-Pro R)

The C-Pro R (Certificação Profissional ANBIMA de Relacionamento) targets professionals responsible for client relationship management and investment advisory. It authorises activities such as product recommendation and offering in accordance with the client’s risk profile, portfolio monitoring, active client prospecting, and performance tracking.

Professionals holding the C-Pro R must also hold the CPA certification. Institutions are required to ensure that at least 75% of professionals performing C-Pro R activities are certified accordingly, while the remaining 25% must obtain C-Pro R within 12 months, maintaining CPA status during the transition period.

3. Investment-level certification (C-Pro I)

The C-Pro I (Certificação Profissional ANBIMA de Investimento) applies to professionals who support distribution teams indirectly, focusing on scenario analysis, market risk assessment, and portfolio construction. These professionals design model portfolios, define product guidelines, and advise CPA and C-Pro R holders.

C-Pro I holders must also possess the CPA certification, but cannot manage client portfolios or perform C-Pro R activities unless they hold that certification as well. As with C-Pro R, institutions must maintain at least 75% of these professionals certified with C-Pro I, with a 12-month window for certifying the remainder.

4. Transition and implementation timetable

To support the transition to the new certification model, Article 36 introduces a phased compliance schedule for achieving the 75% certification target among professionals transitioning from CPA-10:

  • 25% by October 2026
  • 50% by June 2027
  • 75% by February 2028

From March 2028, institutions must maintain a minimum of 75% C-Pro R-certified professionals at all times. During the transition period, only professionals holding CPA—or those in the process of obtaining it—may perform activities associated with C-Pro R.

5. Institutional obligations and supervision

Institutions must establish internal controls and compliance procedures to ensure that only certified professionals engage in regulated activities. They are required to keep ANBIMA’s central certification database updated and to protect the accuracy and confidentiality of professional information.

ANBIMA retains supervisory authority over certification compliance, including the power to impose administrative measures such as warnings, fines, or suspension of certification in the event of breaches.

The updated Rules also reference the complementary document “Orientações e Informações Técnicas para Certificações ANBIMA”, which provides detailed guidance on certification requirements, renewal processes, and ongoing education.

WHAT'S NEXT?

Starting 2 January 2026, institutions must map all affected professional roles, align job descriptions with the new certification hierarchy, and update HR and compliance systems to prevent uncertified individuals from performing regulated activities.

Between 2026 and 2028, they must follow the progressive certification milestones, especially for professionals transitioning from the CPA-10 structure, and ensure ongoing monitoring of compliance with the 75% rule.

Professionals will need to obtain the new CPA, C-Pro R, or C-Pro I certifications and fulfil continuing education and renewal obligations, keeping their expertise aligned with evolving regulations and market practices.

Overall, this reform modernises ANBIMA’s certification framework, strengthens Brazil’s self-regulatory structure for the investment distribution sector, and ensures that market participants uphold consistent standards of professionalism, competence, and investor protection.

COLOMBIA

OTHER - PAYMENTS & OPEN FINANCE

UFR publishes Decree 1069 of 2025 by means of which Book 17 of Part 2 of Decree 2555 of 2010 is amended in relation to payment orders and transfers of funds and other provisions are issued

CACEIS

On 15 October 2025, the UFR published Decree 1069 of 2025 by means of which Book 17 of Part 2 of Decree 2555 of 2010 is amended in relation to payment orders and transfers of funds and other provisions are issued.

Decree No. 1269 of 2025 updates regulations on payment orders and fund transfers in Colombia to improve the safety, efficiency, and accessibility of digital payment systems. Entities with more than 1,500,000 active deposit accounts are required to offer instant inter-entity payment and transfer services, and minimum monthly service availability levels are established based on the number of active accounts. The decree sets procedures for fraud prevention, reversals, and voluntary returns, and mandates that entities report transactions to the Superintendencia Financiera de Colombia, which will publish a semiannual list of entities exceeding the thresholds. A non-binding National Payments Council is created to promote dialogue among payment system actors, identify system gaps, propose regulatory improvements, and foster innovation, with a technical secretariat provided by the Unidad Administrativa Especial de Proyección Normativa y Estudios de Regulación Financiera. Compliance deadlines vary by entity size (18–36 months), and other updates clarify rules for acquirers, intra-entity transfers, deposit handling, and reporting standards, emphasizing security, transparency, and efficiency.

The decree entered into force the day after publication, 16 October 2025, with specific reporting and compliance timelines outlined within.

FRANCE

ALTERNATIVE PRODUCTS

AMF publishes guidance on AIFMD 2 for asset managers / L’AMF publie des orientations sur la directive AIFMD 2 à l’attention des gestionnaires d’actifs

CACEIS

On 22 October 2025, the AMF published a dedicated page on the implementation of AIFMD 2, which amends both the AIFM Directive and the UCITS Directive. The objective is to inform French management companies (UCITS management companies and AIFMs) of the key changes that must be transposed into French law by 16 April 2026 and that will apply from that date, with new reporting obligations starting on 16 April 2027.

The AMF explains who is in scope, outlines expected changes (notably on delegation, liquidity management tools, activities that management companies may perform, governance of senior managers, and reporting to supervisors), and highlights that the new framework will also affect loan-originating AIFs.

The AMF also states that the page is intended to be regularly updated as the transposition into French law progresses and as future Level 2 and Level 3 texts (ESMA technical standards, delegated acts) are finalised.

Version française

Le 22 octobre 2025, l'AMF a publié une page dédiée à la mise en œuvre de la directive AIFMD 2, qui modifie à la fois la directive AIFM et la directive OPCVM. L'objectif est d'informer les sociétés de gestion françaises (sociétés de gestion d'OPCVM et gestionnaires de FIA) des principaux changements qui doivent être transposés dans le droit français avant le 16 avril 2026 et qui s'appliqueront à compter de cette date, avec de nouvelles obligations de déclaration à partir du 16 avril 2027.

L'AMF explique qui est concerné, présente les changements attendus (notamment en matière de délégation, d'outils de gestion de la liquidité, d'activités que les sociétés de gestion peuvent exercer, de gouvernance des cadres supérieurs et de reporting aux autorités de contrôle) et souligne que le nouveau cadre aura également une incidence sur les FIA qui octroient des prêts.

L'AMF précise également que cette page sera régulièrement mise à jour au fur et à mesure de l'avancement de la transposition en droit français et de la finalisation des futurs textes de niveau 2 et 3 (normes techniques de l'AEMF, actes délégués).

 

OTHER - PRUDENTIAL REQUIREMENTS

AMF, ACPR and Banque de France launch first system-wide stress test on interconnections within financial system / La Banque de France, l'ACPR et l'AMF lancent un premier exercice de test de résistance sur les interconnexions au sein du système financier

CACEIS

On 2 October 2025, the Banque de France, the Autorité de contrôle prudentiel et de résolution (ACPR), and the Autorité des marchés financiers (AMF) jointly announced the launch of a first exploratory system-wide stress test to assess interconnections and interdependencies across the French financial system.

This pioneering exercise aims to analyse how severe market shocks propagate through interconnected financial sectors — banks, insurers, and asset managers — and to identify potential amplification effects within the system. Unlike traditional stress tests limited to a single sector, this integrated approach focuses on how collective reactions (e.g. asset sales, borrowing, or liquidity management) could impact overall financial stability.

The exercise involves more than 25 major French financial institutions, including all global systemically important banks (G-SIBs) established in France. Participants will simulate a market stress scenario whose severity exceeds that of the worst two-week period observed over the past 20 years.

This initiative follows similar exercises conducted in the United Kingdom in 2023–2024, from which the French authorities have drawn methodological insights. The first phase will consolidate participant feedback and analyse individual results. A second phase, planned for the first half of 2026, will examine cross-sector interactions and market dynamics. A joint synthesis report will be published at the end of the process.

Participation is voluntary and will not impact individual supervisory assessments. The overall objective is to enhance understanding of contagion channels and identify potential vulnerabilities linked to financial interconnections in times of stress.

Version française

Le 2 octobre 2025, la Banque de France, l'Autorité de contrôle prudentiel et de résolution (ACPR) et l'Autorité des marchés financiers (AMF) ont annoncé conjointement le lancement d'un premier test de résistance exploratoire à l'échelle du système afin d'évaluer les interconnexions et les interdépendances au sein du système financier français.

Cet exercice novateur vise à analyser la manière dont les chocs importants sur les marchés se propagent à travers les secteurs financiers interconnectés (banques, assureurs et gestionnaires d'actifs) et à identifier les effets d'amplification potentiels au sein du système. Contrairement aux tests de résistance traditionnels limités à un seul secteur, cette approche intégrée se concentre sur la manière dont les réactions collectives (par exemple, les ventes d'actifs, les emprunts ou la gestion des liquidités) pourraient avoir un impact sur la stabilité financière globale.

Cet exercice implique plus de 25 grandes institutions financières françaises, y compris toutes les banques d'importance systémique mondiale (G-SIB) établies en France. Les participants simuleront un scénario de crise du marché dont la gravité dépasse celle de la pire période de deux semaines observée au cours des 20 dernières années.

Cette initiative fait suite à des exercices similaires menés au Royaume-Uni en 2023-2024, dont les autorités françaises ont tiré des enseignements méthodologiques. La première phase consistera à consolider les commentaires des participants et à analyser les résultats individuels. Une deuxième phase, prévue pour le premier semestre 2026, examinera les interactions intersectorielles et la dynamique du marché. Un rapport de synthèse conjoint sera publié à la fin du processus.

La participation est volontaire et n'aura aucune incidence sur les évaluations prudentielles individuelles. L'objectif général est de mieux comprendre les canaux de contagion et d'identifier les vulnérabilités potentielles liées aux interconnexions financières en période de crise.

 

RECOVERY & RESOLUTION

France adopts Decree No. 2025-974 adapting own funds, MREL and resolution framework / La France adopte le décret n° 2025-974 adaptant le cadre des fonds propres, du MREL et de la résolution

CACEIS

On 2 October 2025, the French government published Decree No. 2025-974 (JORF No. 0231 of 3 October 2025). The decree applies to credit institutions, financing companies, investment firms, and holders of regulated savings products. It updates the prudential and resolution framework in the Monetary and Financial Code and enters into force the day after publication.

The decree has two main objectives:

1. Transposition / alignment with EU law

The text aligns French law with Directive (EU) 2024/1174 of 11 April 2024 (“Daisy Chains II”), which amends the minimum requirement for own funds and eligible liabilities (MREL), and further refines the transposition of Directive 2014/59/EU (BRRD2).

It introduces:

  • a new definition and regime for “liquidation entities”;
  • the new case where internal MREL applies on a sub-consolidated basis.

2. Adjustments to the French resolution regime

The decree clarifies how the Resolution College sets MREL, including:

  • expression of MREL as a percentage of total risk exposure and total exposure (leverage), including for investment firms;
  • criteria used to calibrate MREL (feasibility of group resolution strategy, loss absorption capacity, recapitalisation needs, systemic impact);
  • conditions under which MREL may be met on a consolidated rather than individual basis, subject to safeguards.

The decree also sets specific treatment for “liquidation entities”:

  • possible tailored MREL at a level above pure loss absorption;
  • simplified reporting and disclosure obligations;
  • rules on when holdings of their own funds / eligible liabilities must be deducted.

It further clarifies compensation for excess bail-in (“indemnisation de l’excès de bail-in”) and allows accelerated decision-making by the Resolution College in urgent cases.

This decree is issued for the application of Article 2.I of Law No. 2025-391 of 30 April 2025 on EU alignment in economic and financial matters.

Version française

Le 2 octobre 2025, le gouvernement français a publié le décret n° 2025-974 (JORF n° 0231 du 3 octobre 2025). Ce décret s'applique aux établissements de crédit, aux sociétés de financement, aux entreprises d'investissement et aux détenteurs de produits d'épargne réglementés. Il actualise le cadre prudentiel et de résolution du Code monétaire et financier et entre en vigueur le lendemain de sa publication.

Le décret a deux objectifs principaux :

1. Transposition / alignement sur le droit de l'Union européenne

Le texte aligne le droit français sur la directive (UE) 2024/1174 du 11 avril 2024 (« Daisy Chains II »), qui modifie l'exigence minimale de fonds propres et de passifs éligibles (MREL), et affine la transposition de la directive 2014/59/UE (BRRD2).

Il introduit :

  • une nouvelle définition et un nouveau régime pour les « entités de liquidation » ;
  • le nouveau cas où le MREL interne s'applique sur une base sous-consolidée.

2. Ajustements du régime français de résolution

Le décret clarifie la manière dont le collège de résolution fixe le MREL, notamment :

  • l'expression du MREL en pourcentage de l'exposition totale au risque et de l'exposition totale (effet de levier), y compris pour les entreprises d'investissement ;
  • les critères utilisés pour calibrer le MREL (faisabilité de la stratégie de résolution du groupe, capacité d'absorption des pertes, besoins de recapitalisation, impact systémique) ;
  • les conditions dans lesquelles le MREL peut être atteint sur une base consolidée plutôt qu'individuelle, sous réserve de garanties.

Le décret prévoit également un traitement spécifique pour les « entités en liquidation » :

  • MREL éventuellement adapté à un niveau supérieur à la simple absorption des pertes ;
  • obligations simplifiées en matière de reporting et de publication ;
  • règles relatives aux cas dans lesquels les fonds propres / passifs éligibles doivent être déduits.

Il clarifie en outre l'indemnisation de l'excès de renflouement interne (« indemnisation de l'excès de bail-in ») et permet une prise de décision accélérée par le collège de résolution dans les cas urgents.

Ce décret est pris en application de l'article 2.I de la loi n° 2025-391 du 30 avril 2025 relative à l'alignement sur l'Union européenne en matière économique et financière.

GERMANY

DATA PROTECTION FRAMEWORK

DSK publishes Guidance on special features of data protection law generative AI systems using the RAG method

CACEIS

On 17 October 2025, the DSK published Guidance on special features of data protection law generative AI systems using the RAG method.

This guidance examines the feasibility of the principles of the GDPR in AI systems with Augmented Generation (RAG) systems. Based on a typical application scenario, the technical components of a RAG system are presented. This shows that the RAG method can have positive effects on the accuracy and traceability of the outputs of an AI system, for example with regard to ensuring contextual and verifiable content, and that the confidentiality and integrity of additionally integrated personal data can be improved in a RAG system. At the same time, new data protection challenges are also emerging. Furthermore, in many cases, the method allows an LLM to be used on-premise, if necessary, which requires less extensive training data, which may mean that less personal data can be extracted from the AI model. Although the assessment of the training of the LLM used as such remains unaffected in particular from the point of view of data protection law, the implementation of the RAG method in an AI system can ultimately lead to a differentiated assessment under data protection law.

 

PAYMENTS

BGBL publishes Twenty-second Ordinance Amending the Foreign Trade and Payments Ordinance

CACEIS

On 31 October 2025, the BGBL published Twenty-second Ordinance Amending the Foreign Trade and Payments Ordinance.

The amendment implements recent changes to the Foreign Trade and Payments Act (AWG) and aligns the AWV with evolving EU regulations on investment screening, sanctions enforcement, and dual-use goods management.

The ordinance refines definitions and procedural rules within the AWV, notably extending due diligence and reporting obligations in cross-border trade, technology transfer, and financial transactions involving non-EU countries. It modernizes terminology to ensure coherence with EU sanction regimes and introduces clarifications on licensing requirements for exports, imports, and intermediary services related to restricted goods, software, or technology. Key sections have been updated to reflect harmonized EU mechanisms for sanctions screening and trade authorizations.

The objectives of the amendment include strengthening regulatory precision, improving administrative efficiency, and enhancing Germany’s capacity to monitor and control transactions relevant to national and EU security interests. The ordinance further specifies the competent authorities for approvals and notifications and introduces procedural simplifications for electronic submission of applications via the BAFA (Federal Office for Economic Affairs and Export Control).

The changes enter into force on 1 November 2025, with certain provisions subject to transitional arrangements to allow adaptation by affected entities. Overall, the measure ensures regulatory alignment with EU foreign trade governance and supports effective implementation of updated sanctions and export control rules.

 

SUSTAINABLE FINANCE / GREEN FINANCE

BMJV publishes Draft Act amending the Criminal Code – Implementation of Directive (EU) 2024/1203 on the Protection of the Environment by Criminal Law

CACEIS

On 17 October 2025, the BMJV published Draft Act amending the Criminal Code – Implementation of Directive (EU) 2024/1203 on the Protection of the Environment by Criminal Law.

The new European directive on the criminal protection of the environment is to be transposed into German law. The aim of the Directive is to combat environmental crime more effectively. The Federal Ministry of Justice and Consumer Protection is proposing comprehensive changes to the Criminal Code (StGB). In close coordination with the Federal Environment Ministry and the Federal Ministry of Agriculture, environmental criminal provisions outside the Criminal Code are also to be adapted.

The draft law of the Federal Ministry of Justice and Consumer Protection provides for the following amendments in particular:

  • Criminal "product liability" for environmentally harmful products
    In response to the so-called diesel scandal, the directive also provides for criminal liability for the marketing of certain environmentally harmful products for the first time. The illegal placing on the market of a product is to be made a punishable offence if the use of this product on a larger scale (i.e. for example by a larger number of users) can lead to significant pollutant emissions and thus to air pollution. In German criminal law, this is to be implemented essentially by adapting the criminal offence of air pollution (§ 325 StGB).
  • New criminal offence for the unlawful execution of environmentally hazardous projects
    In the Criminal Code, the new criminal offence of "unauthorised execution of projects" is to be introduced in § 327a of the Criminal Code. This makes the illegal implementation of environmentally hazardous projects a punishable offence. However, this only applies to those projects for which an environmental impact assessment (EIA) or a corresponding preliminary assessment is required in the approval procedure. These include, for example, large infrastructure projects as well as the construction of power plants or chemical industrial plants.
  • "Ecosystem" as an overall structure worthy of protection
    In all offences that sanction the endangerment or damage of certain so-called environmental media, the "ecosystem" is to be included as an additional environmental medium. The term "ecosystem" is to be defined by law in § 330d paragraph 1 number 2 of the Criminal Code. So far, German criminal law has included the environmental media soil, water, air, animals, plants and human health. The directive provides for the "ecosystem" as another environmental medium worthy of protection in criminal law. This is intended to take into account the importance of the interaction of different organisms and their abiotic environment for environmental protection.
  • Immission of "energy" as a new offence
    In the relevant provisions of the Criminal Code, the immission of certain forms of energy such as "noise", "vibrations", "thermal energy" or "non-ionising radiation" is to be supplemented. Under certain conditions, the Directive also provides for the discharge, supply or introduction of "energy" to be made a punishable offence. This includes, for example, heat, noise and light. German criminal law does not yet reflect this in all cases.
  • Introduction of a qualification requirement in the event of catastrophic consequences for the environment
    In § 330 (2) of the Criminal Code, a new qualification offence is to be introduced for cases in which the intentional realisation of a criminal offence intentionally causes catastrophic consequences for the environment.
  • Changes in Ancillary Criminal Law
    Finally, the Directive requires a large number of changes in ancillary criminal law, i.e. in criminal provisions outside the Criminal Code. Consequential adjustments also result in a number of legal ordinances. New criminal offences must be created, gaps in reinforcement must be closed, penalties must be adapted to the directives, penalties for experimental and reckless offences must be introduced, and qualifications must be provided in the event of catastrophic effects on the environment and in the event of the death of a person.
  • Increase in the maximum amounts of fines imposed on companies
    In order to implement the sanction requirements of the Directive for legal persons, the maximum amount of the corporate fine in the case of intentional offences committed by a manager is to be increased from the current ten to 40 million euros in the Act on Administrative Offences (OWiG). In the event of a negligent crime, the maximum amount of the corporate fine is to be increased from the current five to 20 million euros in the future. This is because the maximum amount of the corporate fine for negligent offences has always been half of the maximum that applies to intentional offences. This also corresponds to the legal concept laid down in § 17 (2) OWiG.

The draft law was sent to the states and associations and published on the website of the Federal Ministry of Justice and Consumer Protection. Interested parties now have the opportunity to comment until 14 November 2025. The statements of the associations are published on the website of the Federal Ministry of Justice and Consumer Protection.

GUERNSEY

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

GFSC updates its AML/CFT/CPF Handbook - Appendix I

CACEIS

On 28 October 2025, the GFSC updated its AML/CFT/CPF Handbook - Appendix I.

The Commission has today updated the Handbook on Countering Financial Crime (AML/CFT/CPF) (the “Handbook”) to remove South Africa from the Appendix I list of higher risk jurisdictions. This is following the Financial Action Task Force’s (“FATF”) decision to remove it from its list of jurisdictions under increased monitoring. FATF has also removed Burkina Faso, Mozambique, and Nigeria from its list of jurisdictions under increased monitoring, however these remain on Appendix I due to being listed by other relevant external sources.

The Commission wishes to remind all licensees that a jurisdiction’s removal from Appendix I does not mean all business relationships connected to that jurisdiction should be assessed as having decreased in risk. Licensees should consider the nature and materiality of a jurisdictional link in their risk assessment, particularly where the change in the jurisdictional risk has little or no impact on other relevant risk factors within the business relationship, such as the type of customer, the customer or beneficial owner’s risk profile, activities, source of wealth and funds, or to the product or service offered by the licensee.

IRELAND

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

Ireland publishes European Union (Anti-Money Laundering: Beneficial Ownership of Trusts) (Amendment) (No. 2) Regulations 2025 (S.I. No. 440/2025)

CACEIS

On 3 October 2025, Ireland’s Minister for Finance published the European Union (Anti-Money Laundering: Beneficial Ownership of Trusts) (Amendment) (No. 2) Regulations 2025 (S.I. No. 440/2025).

These Regulations amend the 2021 framework governing the beneficial ownership of trusts, further implementing Article 31 of Directive (EU) 2015/849 (AMLD IV) as amended by Directive (EU) 2018/843 (AMLD V). The amendments aim to enhance the integrity and enforcement of the central register of beneficial ownership for trusts, strengthening oversight and coordination among obliged entities, competent authorities, and the Registrar.

Key elements

  • New reporting obligation for designated persons:
    A new Regulation 22A requires designated persons—such as banks, auditors, lawyers, or other obliged entities—who identify a relevant trust that appears not to be registered in the central register to promptly notify the Registrar of Beneficial Ownership of Trusts.
  • Registrar follow-up:
    Upon receiving such notice, the Registrar must inform the trustee and request an explanation or the submission of the missing registration details. Trustees must respond within a specified period, either contesting the finding or providing the required information.
  • Similar duty for competent authorities:
    A new Regulation 28A introduces an equivalent obligation for public authorities (e.g. An Garda Síochána, the Revenue Commissioners, the Criminal Assets Bureau, and other competent bodies) to notify the Registrar when they discover that a trust is not registered.
  • Electronic submission and legal protections:
    All filings to the Registrar must be made electronically under the Electronic Commerce Act 2000. The Regulations clarify that notifications, Registrar actions, or trustee submissions made under these provisions do not constitute defamatory material.
  • Updated offences and penalties:
    Trustees who fail to comply with the Registrar’s requests under the new or existing provisions commit an offence and may face a Class A fine on summary conviction or, on indictment, a fine up to €500,000.

These amendments entered into force on 1 October 2025.

 

DIGITAL OPERATIONAL RESILIENCE

Central Bank of Ireland publishes Notice of Intention on the application of the ESMA Guidelines on outsourcing to cloud service providers

CACEIS

On 24 October 2025, the Central Bank of Ireland (CBI) published a Notice of Intention regarding the application of the ESMA Guidelines on outsourcing to cloud service providers (ESMA65-29452987-4737), which were issued by ESMA on 30 September 2025.

The Guidelines apply to competent authorities and to the following entities:

  • Depositaries of AIFs referred to in Article 21(3)(c) and in Article 21(3), third subparagraph of the AIFMD, where they are not financial entities subject to DORA;
  • Depositaries of UCITS referred to in Article 23(2)(c) of the UCITS Directive, also where they are not financial entities to which DORA applies.

These Guidelines are relevant in the context of:

  • For AIF depositaries: Article 21 of the AIFMD and Article 98 of Commission Delegated Regulation (EU) No 231/2013;
  • For UCITS depositaries: Articles 22, 22a, and 23(2) of the UCITS Directive, as well as Article 32 of Commission Directive 2010/43/EU and several provisions (Articles 2(2)(j), 3(1), 13(2), 15, 16, and 22) of Commission Delegated Regulation (EU) No 2016/438.

The Central Bank announced its expectation of full compliance with the ESMA Guidelines from 24 October 2025. Moreover, the CBI indicated its intention to consult on the incorporation of a specific provision in the Central Bank UCITS Regulations and AIF Rulebook. This future amendment would formally require all relevant depositaries (AIF and UCITS) that are not covered by DORA to adhere to the ESMA Guidelines.

ITALY

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

Banca d'Italia publishes Recommendations on the self-assessment exercise of money laundering and terrorist financing risks

CACEIS

On 23 October 2025, the Banca d'Italia published Recommendations on the self-assessment exercise of money laundering and terrorist financing risks.

The document outlines the essential organizational, methodological, and procedural elements necessary for an effective assessment process, emphasizing the adequacy of internal functions, particularly the anti-money laundering function, in managing the exercise. It advises a structured and integrated approach combining qualitative and quantitative analysis for estimating inherent risk, assessing control vulnerabilities, and determining residual risk.

The guidance highlights the importance of clear process formalization, involvement of diverse professional profiles, and cross-functional collaboration. It also stresses the relevance of continuous updates of the risk profile, coordination with new product approvals, and reinforces the significance of data quality, documenting controls, and periodic internal audit reviews of the self-assessment process.

Additionally, it encourages promoting a culture of risk awareness within institutions and the use of training and incentive systems to support adequate risk mitigation practices. For groups, it underscores the necessity of harmonized methodologies and consolidated data architectures coordinated by the parent company. The recommendations aim to foster the convergence towards mature and structured self-assessment practices aligned with evolving European AML regulations, supporting supervisory oversight and effective risk management.

 

DIGITAL ASSETS

Banca d'Italia publishes provisions on crypto-assets

CACEIS

On 1 October 2025, the Banca d'Italia published Provisions on crypto-assets.

The MiCAR establishes a harmonized regulatory framework across the European Union for the issuance, offering, and trading of crypto-assets and the provision of related services. In Italy, this regulation has been implemented through Legislative Decree No. 129/2024, which designates the Bank of Italy and Consob as the competent supervisory authorities. The regulation aims to enhance consumer protection, reduce fraud risks, and create a safer market environment. It applies to issuers of various crypto-assets (such as stablecoins and utility tokens), crypto-asset service providers (exchanges, wallets, trading platforms), and institutional investors distributing crypto-assets in the EU, while excluding central bank digital currencies and certain non-fungible tokens.

The Italian regulatory framework introduces requirements for authorization, governance, transparency, investor protection, and risk management. Crypto-asset service providers must obtain appropriate licenses and comply with ongoing supervision, including anti-money laundering measures. The authorities have enforcement powers including the ability to suspend operations, revoke licenses, and impose significant fines. The transitional period for compliance extends to mid-2026, giving firms additional time to adjust to the new rules. Overall, MiCAR and its implementation in Italy aim to foster innovation while ensuring financial stability and market integrity in the crypto space.

The regulation enters into force 15 days after its publication in the Official Gazette of the Italian Republic. The decree was signed on September 30, 2025, and thus the effective date of entry into force was mid-October 2025. This timing shall allow for the formal implementation of the EU Markets in Crypto-Assets Regulation (MiCAR) provisions within the Italian legal framework starting around that period.

 

FINANCIAL INSTRUMENTS

CONSOB publishes Resolution no. 23683 on Amendments to the Issuers' Regulations concerning the admission to trading of UCIs

CACEIS

BACKGROUND

On 1 October 2025, Consob published Resolution no. 23683, introducing amendments to the Issuers’ Regulation (Resolution no. 11971 of 14 May 1999) concerning the admission to trading of units or shares of undertakings for collective investment (UCIs) on Italian regulated markets.

These changes follow the public consultation launched on 27 June 2025, which sought feedback on Consob’s proposal to align Italian requirements with EU legislation—notably Directive 2009/65/EC (UCITS), Directive 2011/61/EU (AIFMD), and Regulation (EU) No 1286/2014 on packaged retail and insurance-based investment products (PRIIPs).

The initiative aims to simplify regulatory obligations for asset managers and eliminate national specificities that no longer add informational value, ensuring consistency between Italian and other EU markets.

WHAT'S NEW?

Consob repeals the obligation to prepare and publish a listing document for the admission to trading of Italian and EU UCITS or AIFs managed by EU AIFMs. This obligation was unique to the Italian legal framework and not required under EU law. Its removal eliminates a duplicative disclosure layer, as investors already receive the necessary pre-contractual information through the prospectus and KID/KIID introduced under EU legislation.

The Issuers’ Regulation has been amended accordingly. In particular, Articles 59 and 60 have been revised to remove references to the listing document and clarify that only the KID/KIID and prospectus must be published before the start of trading. Article 103-bis has also been updated to reflect this deletion.

Further changes are introduced to Annex 1B of the Regulation, adapting the structure and content of the prospectus for UCIs admitted to trading. The amendments refine the information to be disclosed under the “General Information,” “Investment Information,” and “Economic Information” sections, ensuring alignment with European disclosure templates. A new subsection, “Information relating to quotation,” has been added to specify the market of admission, the trading start date, the disclosure of indicative net asset value (iNAV), and portfolio transparency rules for ETFs.

The revised annex also requires clearer investor disclosures on trading and redemption mechanisms, especially for ETFs and AIFs traded on secondary markets. It introduces a warning that market transactions may involve costs or spreads relative to NAV and typically require the assistance of an intermediary. Moreover, the “Investor Information” section now mandates that all core documents, including the KID/KIID, prospectus, fund rules, and financial statements, be made available on the websites of both the management company and the trading venue.

Finally, Schedule 2, which previously contained the model for the listing document for EU UCITS and AIFs, has been abolished.

The Resolution was published in the Gazzetta Ufficiale della Repubblica Italiana (No. 235 of 9 October 2025) and entered into force the following day, applying to all ongoing admission procedures as of that date.

WHAT'S NEXT?

The repeal of the listing document marks a significant step toward regulatory simplification and alignment with EU standards. Asset managers and AIFMs will now only need to prepare the KID/KIID and prospectus when seeking admission of their funds to trading in Italy.

This change is expected to reduce administrative burdens, streamline fund listing processes, and facilitate cross-border consistency in fund documentation. For investors, it enhances transparency and comparability, as disclosures will now follow harmonised EU formats.

Overall, Consob’s reform contributes to a more competitive and integrated European fund market, reflecting its ongoing strategy to simplify domestic regulation and strengthen Italy’s alignment with EU financial frameworks.

JERSEY

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

JFSC updates its Countries and territories in AML/CFT/CPF Handbook appendices

CACEIS

On 27 October 2025, the JFSC updated its Countries and territories in AML/CFT/CPF Handbook appendices.

Effective immediately, countries and territories listed under Sources 1 and 2 of Appendix D2 should be treated as not compliant with FATF Recommendations for the purpose of Article 17A of the Money Laundering Order.

On 24 October 2025, Appendix D2 was amended with no countries or territories added to the list. South Africa was removed from the list of countries and territories. Additionally, no new Source 1 entries were added or removed. Regarding Source 2, no additions were made, but Burkina Faso, Mozambique, Nigeria, and South Africa were removed from the list.

LUXEMBOURG

ECONOMIC OUTLOOK

ALFI publishes a report on the 2025 Private Assets Conference / ALFI publie un rapport sur la Conférence 2025 dédiée aux actifs privés

CACEIS

On 20 October 2025, ALFI published a report on the Private Assets Conference.

Held in Luxembourg on 30 September and 1 October 2025, ALFI’s Private Assets Conference underscored the Grand Duchy’s growing dominance in private markets, as the country prepares to transpose AIFMD II and consolidate its lead in private debt, private equity, infrastructure, and long-term investment funds (ELTIF 2.0).

Sector overview:
Total Luxembourg fund assets reached €7.45 trillion, of which €2.65 trillion are private or alternative assets (+20% year-on-year). ALFI chair Jean-Marc Goy highlighted the need to sustain growth through talent development, referencing new academic programmes at the University of Luxembourg and McGill University Luxembourg Centre.

Regulatory developments:
Finance Minister Gilles Roth confirmed that AIFMD II transposition bill no. 8628 was tabled on 3 October 2025, with an EU implementation deadline of 16 April 2026. The law will transpose the directive 1:1, with no gold-plating, preserving the delegation model (key to Luxembourg’s competitiveness) while introducing enhanced reporting and a ban on consumer lending by AIFs. Roth reiterated opposition to giving ESMA centralised supervisory powers over fund authorisations, favouring national oversight.

The conference also welcomed the government’s carried interest reform bill, praised by leading private-equity executives (EQT, Astorg) as predictable and internationally competitive.

Market dynamics:
Private debt funds grew by ~25% in 2024; 82% of investors remain institutional. Luxembourg now houses ~60% of all EU ELTIFs, benefitting from streamlined CSSF authorisations (as fast as six weeks).

Sessions also explored tokenisation, natural capital, and the blue economy (UN High Seas Treaty entering into force on 17 Jan 2026), alongside the increasing intersection of AI and infrastructure, and the debate over defence investment compatibility with ESG principles.

Overall, the conference positioned Luxembourg as Europe’s flagship hub for private assets, driven by regulatory agility, sustainable-finance alignment, and high investor demand amid global uncertainty.

Version française

Le 20 octobre 2025, l'ALFI a publié un rapport sur la conférence consacrée aux actifs privés.

Organisée à Luxembourg les 30 septembre et 1er octobre 2025, la conférence sur les actifs privés de l'ALFI a souligné la domination croissante du Grand-Duché sur les marchés privés, alors que le pays se prépare à transposer la directive AIFMD II et à consolider son avance dans les domaines de la dette privée, du capital-investissement, des infrastructures et des fonds d'investissement à long terme (ELTIF 2.0).

Aperçu du secteur :
Le total des actifs des fonds luxembourgeois a atteint 7 450 milliards d'euros, dont 2 650 milliards d'euros d'actifs privés ou alternatifs (+20 % par rapport à l'année précédente). Le président de l'ALFI, Jean-Marc Goy, a souligné la nécessité de soutenir la croissance par le développement des talents, en faisant référence aux nouveaux programmes universitaires de l'Université du Luxembourg et du Centre de l'Université McGill au Luxembourg.

Évolutions réglementaires :
Le ministre des Finances, Gilles Roth, a confirmé que le projet de loi n° 8628 transposant la directive AIFMD II avait été déposé le 3 octobre 2025, la date limite de mise en œuvre par l'UE étant fixée au 16 avril 2026. La loi transposera la directive à l'identique, sans ajout de dispositions supplémentaires, en préservant le modèle de délégation (essentiel à la compétitivité du Luxembourg) tout en introduisant des obligations de reporting renforcées et une interdiction des prêts à la consommation par les FIA. M. Roth a réitéré son opposition à l'octroi à l'AEMF de pouvoirs de surveillance centralisés sur les autorisations de fonds, privilégiant la surveillance nationale.

La conférence a également salué le projet de loi du gouvernement sur la réforme des intérêts reportés, salué par les principaux dirigeants de sociétés de capital-investissement (EQT, Astorg) comme étant prévisible et compétitif au niveau international.

Dynamique du marché :
Les fonds de dette privée ont progressé d'environ 25 % en 2024 ; 82 % des investisseurs restent institutionnels. Le Luxembourg héberge désormais environ 60 % de tous les ELTIF de l'UE, bénéficiant d'autorisations simplifiées de la CSSF (en seulement six semaines).

Les sessions ont également abordé la tokenisation, le capital naturel et l'économie bleue (le traité des Nations unies sur la haute mer entrera en vigueur le 17 janvier 2026), ainsi que l'intersection croissante entre l'IA et les infrastructures, et le débat sur la compatibilité des investissements dans la défense avec les principes ESG.

Dans l'ensemble, la conférence a positionné le Luxembourg comme le centre phare de l'Europe pour les actifs privés, grâce à la souplesse réglementaire, à l'alignement sur la finance durable et à la forte demande des investisseurs dans un contexte d'incertitude mondiale.

 

FINANCIAL INSTRUMENTS

Chambre des députés publishes draft law no 8628 on AIFMD 2 and UCITS 6 / La Chambre des députés publie le projet de loi n° 8628 relatif à la directive AIFMD 2 et à la directive OPCVM 6

CACEIS

BACKGROUND

On 2 October 2025, the Chambre des Députés published Bill 8628, which implements AIFMD 2 (Directive (EU) 2024/927) and UCITS 6 into Luxembourg law. The bill amends both the UCI Law 2010 and the AIFM Law 2013, largely by transposing the EU provisions as adopted, while adding several Luxembourg-specific flexibilities and clarifications of particular relevance for the fund industry.
The reform updates the national framework on delegation, liquidity risk management, supervisory reporting, depositary/custody, and loan origination by AIFs, ensuring full alignment with the new European regime while preserving Luxembourg’s operational and structuring advantages for fund managers.

WHAT'S NEW?

1. Transposition of the core AIFMD 2 / UCITS 6 package

Bill 8628 incorporates all key elements of the EU framework, including:

  • Reinforced delegation oversight, with clearer rules on functions, reporting and supervisory cooperation.
  • Liquidity risk management (LRM) requirements applicable to both AIFs and UCITS.
  • A harmonised framework on depositary services, including strengthened oversight and cross-border access rules.
  • A unified approach to supervisory reporting obligations for AIFMs and UCITS management companies.
  • The introduction of a complete EU regime for loan-originating AIFs, covering leverage limits, retention, diversification and conflict-of-interest safeguards.

2. Luxembourg flexibilities introduced through the draft law

Additional liquidity management tools (LMTs):
Luxembourg authorises the use of extra LMTs for AIFs and UCITS beyond the list in AIFMD 2, giving managers greater flexibility to manage liquidity under stress scenarios.

Consumer loan restrictions for loan-originating AIFs:
The bill prohibits:

  • lending to Luxembourg consumers, and
  • servicing such loans within Luxembourg,

except in narrowly defined scenarios outlined in the commentary. This establishes a clear perimeter for loan origination activities without affecting institutional lending strategies.

In-kind subscriptions/redemptions under UCITS:
The bill creates an exemption from the independent auditor’s report for UCITS units issued in kind, provided fair treatment of investors is ensured.
The commentary extends this approach to:

  • FCPs, and
  • redemptions in kind,

which could be particularly attractive for UCITS ETF structures.

3. Clarifications and sector-specific improvements

Ancillary activities:
Luxembourg leverages the broader definition introduced by AIFMD 2 to enable more efficient entity structuring, for example by grouping skills, functions and infrastructure within a single management entity.

Substance requirements:
The bill confirms that the new EU substance expectations do not materially change practice in Luxembourg, as similar standards already apply under CSSF administrative practice.

Loan origination rules:
The draft law provides useful clarifications on:

  • the 20% diversification rule,
  • the 5% retention rule, and
  • leverage conditions for loan-originating AIFs.

These adjustments aim to ensure practical implementation and support market competitiveness.

WHAT'S NEXT?

  • Legislative process: Bill 8628 will now follow the standard parliamentary procedure, including consultation of the Council of State and eventual adoption by the Luxembourg Parliament.
  • Entry into force: The law is scheduled to apply from 16 April 2026.
  • Reporting obligations: Provisions relating to AIFMD 2 / UCITS 6 reporting will apply one year later, from 16 April 2027, to allow time for operational and system adaptations.

Overall, the bill aligns Luxembourg with the new EU fund management regime while introducing targeted improvements that preserve the competitive positioning of the Luxembourg fund industry.

Version française

BACKGROUND

Le 2 octobre 2025, la Chambre des Députés a publié le projet de loi 8628, qui transpose la directive AIFMD 2 (directive (UE) 2024/927) et la directive OPCVM 6 dans le droit luxembourgeois. Ce projet de loi modifie à la fois la loi UCI 2010 et la loi AIFM 2013, en transposant largement les dispositions européennes telles qu'elles ont été adoptées, tout en ajoutant plusieurs flexibilités spécifiques au Luxembourg et des clarifications particulièrement pertinentes pour le secteur des fonds.
La réforme actualise le cadre national en matière de délégation, de gestion du risque de liquidité, de reporting prudentiel, de dépositaire/conservation et d'octroi de prêts par les FIA, garantissant ainsi une harmonisation totale avec le nouveau régime européen tout en préservant les avantages opérationnels et structurels du Luxembourg pour les gestionnaires de fonds.

WHAT'S NEW?

1. Transposition du paquet AIFMD 2 / UCITS 6
Le projet de loi 8628 intègre tous les éléments clés du cadre européen, notamment :

  • Un renforcement du contrôle des délégations, avec des règles plus claires en matière de fonctions, de reporting et de coopération en matière de surveillance.
  • Des exigences en matière de gestion des risques de liquidité (LRM) applicables à la fois aux FIA et aux OPCVM.
  • Un cadre harmonisé pour les services de dépositaire, comprenant un renforcement de la surveillance et des règles d'accès transfrontalier.
  • Une approche unifiée des obligations de déclaration en matière de surveillance pour les gestionnaires de FIA et les sociétés de gestion d'OPCVM.
  • L'introduction d'un régime européen complet pour les FIA qui octroient des prêts, couvrant les limites d'effet de levier, la rétention, la diversification et les mesures de protection contre les conflits d'intérêts.

2. Flexibilités introduites par le projet de loi luxembourgeois

Outils supplémentaires de gestion de la liquidité (LMT) :
Le Luxembourg autorise l'utilisation d'outils supplémentaires de gestion de la liquidité pour les FIA et les OPCVM au-delà de la liste figurant dans la directive AIFMD 2, ce qui donne aux gestionnaires une plus grande flexibilité pour gérer la liquidité dans des scénarios de crise.

Restrictions en matière de prêts à la consommation pour les FIA qui octroient des prêts :
Le projet de loi interdit :

  • l'octroi de prêts aux consommateurs luxembourgeois, et
  • le service de ces prêts au Luxembourg,

sauf dans des scénarios strictement définis décrits dans le commentaire. Cela établit un périmètre clair pour les activités d'octroi de prêts sans affecter les stratégies de prêt institutionnelles.

Souscriptions/rachats en nature dans le cadre des OPCVM :
Le projet de loi prévoit une exemption du rapport de l'auditeur indépendant pour les parts d'OPCVM émises en nature, à condition que le traitement équitable des investisseurs soit garanti.
Le commentaire étend cette approche aux :

  • FCP, et
  • rachats en nature,

ce qui pourrait être particulièrement intéressant pour les structures ETF OPCVM.

3. Clarifications et améliorations spécifiques au secteur

Activités auxiliaires :
Le Luxembourg tire parti de la définition plus large introduite par la directive AIFMD 2 pour permettre une structuration plus efficace des entités, par exemple en regroupant les compétences, les fonctions et les infrastructures au sein d'une seule entité de gestion.

Exigences en matière de substance :
Le projet de loi confirme que les nouvelles attentes de l'UE en matière de substance ne modifient pas de manière significative la pratique au Luxembourg, car des normes similaires s'appliquent déjà dans le cadre de la pratique administrative de la CSSF.

Règles relatives à l'octroi de prêts :
Le projet de loi apporte des clarifications utiles sur :

  • la règle de diversification de 20 %,
  • la règle de rétention de 5 %, et
  • les conditions de levier pour les FIA octroyant des prêts.

Ces ajustements visent à garantir une mise en œuvre pratique et à soutenir la compétitivité du marché.

WHAT'S NEXT?

  • Processus législatif : le projet de loi 8628 suivra désormais la procédure parlementaire standard, y compris la consultation du Conseil d'État et l'adoption finale par le Parlement luxembourgeois.
  • Entrée en vigueur : la loi devrait s'appliquer à compter du 16 avril 2026.
  • Obligations de déclaration : les dispositions relatives à la déclaration AIFMD 2 / UCITS 6 s'appliqueront un an plus tard, à compter du 16 avril 2027, afin de laisser le temps nécessaire aux adaptations opérationnelles et systémiques.

Dans l'ensemble, le projet de loi aligne le Luxembourg sur le nouveau régime européen de gestion des fonds tout en introduisant des améliorations ciblées qui préservent la position concurrentielle du secteur luxembourgeois des fonds.

 

CSSF publishes an updated Q&A on Circular 25/894 / La CSSF publie une mise à jour du Q&A sur la Circulaire 25/894

CACEIS

On 3 October 2025, CSSF published an updated Q&A (version 2, 3 Oct 2025) clarifies information reporting to CSSF for funds not authorised by CSSF (non-CSSF-authorised AIFs and foreign UCITS managed by Lux firms). It supplements Circular 25/894 (which amends 15/612).

Scope & who must notify:

  • Lux Chapter 15 ManCos must declare UCITS established in another Member State that they manage.
  • Authorised AIFMs must declare AIFs established in another Member State that they manage.
  • Declarations are in principle prior to LPS/branch notifications.

Constitution & changes:

  • Funds in formation cannot be notified under the circular; however, AIFM may notify management of an AIF in formation under AIFMD Art.33 (LPS/branch) and must file the circular notification once constituted.
  • Notify CSSF for AIFM change and status change (authorised ? non-authorised).

ELTIF: a Lux non-authorised AIF with any ELTIF compartment must be notified; subsequent ELTIF changes go via eDesk using the dedicated 25/894 workflow.

Ongoing reporting & events:

  • Financial reports: submit via eDesk.
  • Liquidation: AIFM must inform CSSF within 10 business days of effective liquidation date; thereafter, no further 25/894 reporting for that fund.

Operating models (acceptability): Tables specify acceptable depositary, administration, and delegated portfolio manager set-ups by fund type and location, incl. DPEAAIF for non-financial-asset strategies, EU/third-country delegation conditions, and no conflict with depositary.

Similar matrices for EU UCITS managed by Lux SG15 (depositary/admin/delegation).

Retroactivity & timing (new in v2):

  • Not retroactive for already-notified AIFs (but use new forms upon modifications).
  • Retroactive for foreign UCITS already managed pre-effective date (CSSF wants a complete census).

Deadlines:

  • If fund was not constituted when management began: submit ?10 business days after constitution.
  • If management ceases: submit at cessation or ?10 business days after.
  • Provider changes at launch: update form ?10 business days after contract signing.

Version française

Le 3 octobre 2025, la CSSF a publié une version mise à jour du Q&A (version 2, datée du 3 octobre 2025) précisant les modalités de déclaration d’informations à la CSSF pour les fonds non autorisés par la CSSF (FIA non autorisés et OPCVM étrangers gérés par des sociétés luxembourgeoises). Ce document complète la Circulaire 25/894 (qui modifie la Circulaire 15/612).

Champ d’application et entités tenues à notification :

  • Les sociétés de gestion agréées au titre du Chapitre 15 doivent déclarer les OPCVM établis dans un autre État membre qu’elles gèrent.
  • Les GFIA autorisés doivent déclarer les FIA établis dans un autre État membre qu’ils gèrent.
  • Les déclarations doivent en principe être effectuées avant les notifications de LPS/établissement de succursale.

Constitution et modifications :

  • Les fonds en cours de constitution ne peuvent pas être notifiés au titre de la circulaire.
  • Il convient de notifier à la CSSF tout changement de GFIA ou de statut (autorisé ? non autorisé).

ELTIF : un FIA luxembourgeois non autorisé comprenant au moins un compartiment ELTIF doit être notifié.

Reporting et événements continus :

  • Rapports financiers : à soumettre via eDesk.
  • Liquidation : l'AIFM doit informer la CSSF dans les 10 jours ouvrables suivant la date effective de liquidation ; par la suite, aucun autre rapport 25/894 ne sera exigé pour ce fonds.

Modèles opérationnels (acceptabilité) : les tableaux précisent les configurations acceptables en matière de dépositaire, d'administration et de gestionnaire de portefeuille délégué par type de fonds et par lieu, y compris les DPEAAIF pour les stratégies non financières, les conditions de délégation dans l'UE/les pays tiers et l'absence de conflit avec le dépositaire.

Matrices similaires pour les OPCVM de l'UE gérés par Lux SG15 (dépositaire/administration/délégation).

Rétroactivité et calendrier (nouveau dans la version 2) :

  • Non rétroactif pour les FIA déjà notifiés (mais utiliser les nouveaux formulaires en cas de modifications).
  • Rétroactif pour les OPCVM étrangers déjà gérés avant la date d'entrée en vigueur (la CSSF souhaite un recensement complet).

Délais :

  • Si le fonds n'était pas constitué au moment où la gestion a commencé : soumettre ? 10 jours ouvrables après la constitution.
  • Si la gestion cesse : soumettre à la cessation ou ? 10 jours ouvrables après.
  • Changement de fournisseur au lancement : mettre à jour le formulaire ? 10 jours ouvrables après la signature du contrat.

 

GOVERNANCE & ORGANISATION

BCL publishes the revised report TPTOBS Security-by-security report of investment fund / BCL publie le rapport révisé TPTOBS – Rapport titre par titre des fonds d’investissement

CACEIS

On 16 October 2025, BCL published the PTOBS instructions consolidate and revise the monthly, security-by-security reporting for all investment funds (MMFs and non-MMFs). The update relates to Point 4.3 “identification of the issuer”:

  • Add part to the description of the codification for alternative investment funds non-authorised by the CSSF (NAF; umbrella funds): letter C to separate the number of the investment fund and the number of the compartment
  • Modification of the hyperlink of the list of national identifiers following an update on the ECB website.

With regards to the first point the changes are the following:

Issuer identification and reporting rules

  • National identifiers are listed on the ECB website
  • Luxembourg counterparties use their Trade and Companies Register number (RCS number) as the national identifier, exactly as registered.
  • Public administrations and entities without an RCS number use their international VAT number (e.g., BCL: 15444328). A list of public entity VAT numbers is available via the Ministry for Digitalization.
  • Peppol identifiers can be based on VAT numbers or the 11-digit legal entity number, but for TPT reporting only the VAT-based identifier (without LU prefix) is used.
  • Investment funds must be reported at the sub-fund level unless using a traditional structure.

Luxembourg investment funds

  • CSSF-authorized funds: use CSSF identification numbers
  • UCITS, Part II UCI, SIF, SICAR: 6-character fund ID, 5-character sub-fund ID

Non-authorized alternative investment funds (NAF): use RCS-based IDs

  • Traditional fund: 6-character entity type + 7-digit fund number
  • Umbrella fund: 6-character entity type + 7-digit fund number + “C” + 5-digit compartment number

ECB maintains official lists of fund identifiers; if missing, RCS number is used.

Default values: If no identifier is available, report type as “XX_NOTAP” and code as “XX.” Usage should be exceptional and is monitored by the BCL.

Version française

Le 16 octobre 2025, la BCL a publié les instructions PTOBS consolidant et révisant les rapports mensuels titre par titre pour tous les fonds d'investissement (MMF et non-MMF). La mise à jour concerne le point 4.3 « identification de l'émetteur » :

  • Ajout d'une partie à la description de la codification pour les fonds d'investissement alternatifs non agréés par la CSSF (NAF ; fonds à compartiments multiples) : lettre C pour séparer le numéro du fonds d'investissement et le numéro du compartiment
  • Modification du lien hypertexte de la liste des identifiants nationaux suite à une mise à jour sur le site web de la BCE.

En ce qui concerne le premier point, les modifications sont les suivantes :

Identification de l'émetteur et règles de déclaration

  • Les identifiants nationaux sont répertoriés sur le site web de la BCE
  • Les contreparties luxembourgeoises utilisent leur numéro d'enregistrement au registre du commerce et des sociétés (numéro RCS) comme identifiant national, tel qu'il est enregistré.
  • Les administrations publiques et les entités sans numéro RCS utilisent leur numéro de TVA international (par exemple, BCL : 15444328). Une liste des numéros de TVA des entités publiques est disponible via le ministère de la Numérisation.
  • Les identifiants Peppol peuvent être basés sur les numéros de TVA ou le numéro d'entité juridique à 11 chiffres, mais pour les déclarations TPT, seul l'identifiant basé sur la TVA (sans préfixe LU) est utilisé.
  • Les fonds d'investissement doivent être déclarés au niveau des compartiments, sauf s'ils utilisent une structure traditionnelle.

Fonds d'investissement luxembourgeois

  • Fonds agréés par la CSSF : utiliser les numéros d'identification CSSF
  • OPCVM, OPC de type II, FSI, SICAR : identifiant du fonds à 6 caractères, identifiant du compartiment à 5 caractères

Fonds d'investissement alternatifs non agréés (NAF) : utiliser les identifiants basés sur le RCS

  • Fonds traditionnel : type d'entité à 6 caractères + numéro de fonds à 7 chiffres
  • Fonds à compartiments multiples : type d'entité à 6 caractères + numéro de fonds à 7 chiffres + « C » + numéro de compartiment à 5 chiffres

La BCE tient à jour des listes officielles d'identifiants de fonds ; en cas d'absence, le numéro RCS est utilisé.

Valeurs par défaut : si aucun identifiant n'est disponible, indiquer le type « XX_NOTAP » et le code « XX ». L'utilisation de ces identifiants doit rester exceptionnelle et est contrôlée par la BCL.

 

CSSF publishes version 5 of its FAQ on Circular 22/811 governing UCI Administrators (UCIAs). / La CSSF publie la version 5 de sa FAQ relative à la Circulaire 22/811 encadrant les administrateurs d’OPC (UCIAs)

CACEIS

On 23 October 2025, the CSSF issued Version 5 of its FAQ on Circular 22/811 governing UCI Administrators (UCIAs). This version’s only amendment is the deletion of Questions 5.1 and 6.1, which previously addressed (i) the timeline for the first annual UCIA reporting (point 7 of the Circular) and (ii) the definition of “central administration” under the UCIA Circular versus under the sectoral laws for Part II UCIs, SIFs and SICARs.

The other sections of the FAQ remain unchanged and reaffirm the supervisory expectations on key UCIA obligations:

  • Data-backup (Q 1.1): UCIAs must maintain secure backups of accounting balances and register positions to ensure availability in Luxembourg/EEA, without needing full business-continuity replication.
  • Use of DLT (Q 1.2): Distributed-ledger technology may be used for the unit/shareholder register, provided one single registrar remains legally responsible. The CSSF reiterates its technology-neutral stance and refers professionals to its DLT white paper for due-diligence guidance.
  • Scope (Q 2.1-2.2): The Circular applies to entities actually performing UCIA functions in Luxembourg (registrar, NAV and accounting, client communication) but not to UCIs/IFMs having wholly delegated them.
  • Administration functions (Q 3.1-3.3): A UCIA may perform one, several, or all functions but remains fully responsible for each; delegation cannot reduce it to a letter-box entity.
  • Delegation (Q 4.1): Sub-delegation chains are permitted if objectively justified, risk-controlled, and approved by the CSSF when outside the UCIA or IFM group.

The FAQ thus consolidates the operational interpretation of the UCIA Circular and signals that annual-reporting timelines and “central administration” definitions are now likely being re-framed in a forthcoming CSSF communication or new circular.

Version française

Le 23 octobre 2025, la CSSF a publié la version 5 de sa FAQ relative à la Circulaire 22/811 régissant les administrateurs d'OPC (UCIAs). La seule modification apportée à cette version est la suppression des questions 5.1 et 6.1, qui traitaient auparavant (i) du calendrier pour le premier rapport annuel des UCIA (point 7 de la circulaire) et (ii) de la définition de « l'administration centrale » dans la circulaire UCIA par rapport aux lois sectorielles applicables aux OPC de la partie II, aux SIF et aux SICAR.

Les autres sections de la FAQ restent inchangées et réaffirment les attentes des autorités de surveillance concernant les obligations clés des UCIA :

  • Sauvegarde des données (Q 1.1) : les UCIA doivent conserver des sauvegardes sécurisées des soldes comptables et des positions enregistrées afin de garantir leur disponibilité au Luxembourg/dans l'EEE, sans qu'il soit nécessaire de reproduire l'intégralité de la continuité des activités.
  • Utilisation de la technologie des registres distribués (Q 1.2) : la technologie des registres distribués peut être utilisée pour le registre des parts/actionnaires, à condition qu'un seul registraire reste légalement responsable. La CSSF réitère sa position de neutralité technologique et renvoie les professionnels à son livre blanc sur la technologie des registres distribués pour obtenir des conseils en matière de diligence raisonnable.
  • Champ d'application (Q 2.1-2.2) : la circulaire s'applique aux entités exerçant effectivement des fonctions d'OPCVM au Luxembourg (registraire, VNI et comptabilité, communication avec les clients), mais pas aux OPC/IFM qui les ont entièrement déléguées.
  • Fonctions administratives (Q 3.1-3.3) : une UCIA peut exercer une, plusieurs ou toutes les fonctions, mais reste pleinement responsable de chacune d'entre elles ; la délégation ne peut la réduire à une entité boîte aux lettres.
  • Délégation (Q 4.1) : les chaînes de sous-délégation sont autorisées si elles sont objectivement justifiées, contrôlées en termes de risques et approuvées par la CSSF lorsqu'elles ne relèvent pas du groupe UCIA ou IFM.

La FAQ consolide ainsi l'interprétation opérationnelle de la circulaire UCIA et indique que les délais de déclaration annuelle et les définitions de « l'administration centrale » sont désormais susceptibles d'être redéfinis dans une prochaine communication de la CSSF ou dans une nouvelle circulaire.

 

OUTSOURCING

ABBL publishes its response to the EBA consultation on the Draft Guidelines on the sound management of third-party risk / ABBL publie sa réponse à la consultation de l’ABE sur le projet de lignes directrices sur la gestion du risque lié aux tiers

CACEIS

On 14 October 2025, the ABBL has submitted its response to the EBA consultation EBA/CP/2025/12 on the Draft Guidelines on the sound management of third-party risk, warning that the current proposal risks creating regulatory overlap and unnecessary complexity by merging DORA provisions with legacy elements from the 2019 Outsourcing Guidelines.

While the ABBL supports harmonisation across the EU, it emphasises that the Guidelines must align fully with DORA, avoiding any “hybrid framework” that mixes non-ICT outsourcing provisions with ICT-related rules already covered under DORA. Without that alignment, firms may face duplicated contractual renegotiations, multiple registers of third-party providers and inconsistent supervisory expectations across Member States.

To maintain proportionality and risk focus, the ABBL proposes the following key adjustments:

  • Allow contractual remediation at next renewal cycle, rather than a strict two-year compliance deadline, to avoid forced renegotiations.
  • Standardise terminology by using DORA’s definitions for function, service, arrangement, ICT provider, and subcontracting, to eliminate ambiguity.
  • Enable a single register of third-party providers, aligned with the DORA Register of Information and avoid parallel reporting obligations.
  • Restrict enhanced due diligence, subcontracting oversight and notification duties to providers supporting CIFs, consistent with DORA’s materiality principle.

The ABBL also stresses the importance of supervisory convergence, urging the ESAs to coordinate guidance and avoid national gold-plating. A streamlined, DORA-first approach would enable institutions to focus resources on true operational resilience risks, rather than administrative duplication.

Version française

Le 14 octobre 2025, l'ABBL a soumis sa réponse à la consultation EBA/CP/2025/12 de l'ABE sur le projet de lignes directrices relatives à la gestion saine des risques liés aux tiers, avertissant que la proposition actuelle risque de créer un chevauchement réglementaire et une complexité inutile en fusionnant les dispositions de DORA avec des éléments hérités des lignes directrices de 2019 sur l'externalisation.

Si l'ABBL soutient l'harmonisation au sein de l'UE, elle souligne que les lignes directrices doivent s'aligner pleinement sur DORA, en évitant tout « cadre hybride » qui mélangerait des dispositions relatives à l'externalisation non liée aux TIC avec des règles liées aux TIC déjà couvertes par DORA. Sans cet alignement, les entreprises pourraient être confrontées à des renégociations contractuelles redondantes, à des registres multiples de fournisseurs tiers et à des attentes de surveillance incohérentes entre les États membres.

Afin de maintenir la proportionnalité et l'accent mis sur les risques, l'ABBL propose les ajustements clés suivants :

  • Autoriser la remédiation contractuelle lors du prochain cycle de renouvellement, plutôt que d'imposer un délai de conformité strict de deux ans, afin d'éviter les renégociations forcées.
  • Normaliser la terminologie en utilisant les définitions de DORA pour les fonctions, les services, les accords, les fournisseurs de TIC et la sous-traitance, afin d'éliminer toute ambiguïté.
  • Mettre en place un registre unique des prestataires tiers, aligné sur le registre d'informations DORA, et éviter les obligations de déclaration parallèles.
  • Limiter les obligations de diligence renforcée, de surveillance de la sous-traitance et de notification aux prestataires qui soutiennent les CIF, conformément au principe de matérialité de DORA.

L'ABBL souligne également l'importance de la convergence en matière de surveillance, exhortant les AES à coordonner leurs orientations et à éviter toute surréglementation nationale. Une approche rationalisée, axée sur la DORA, permettrait aux institutions de concentrer leurs ressources sur les risques réels en matière de résilience opérationnelle, plutôt que sur la duplication administrative.

 

ALFI publishes its response to the EBA consultation on the Guidelines on the sound management of third-party risks / ALFI publie sa réponse à la consultation de l’ABE sur les Lignes directrices relatives à la gestion saine des risques liés aux tiers

CACEIS

On 8 October 2025, ALFI published its response to the EBA’s draft Guidelines on the sound management of third-party risks (non-ICT), welcoming convergence but warning against scope creep and duplication with existing sectoral rules and DORA.

Scope & perimeter

ALFI asks the EBA to clarify unequivocally that investment fund managers (IFMs/ManCos) are out of scope both at solo and consolidated level so as to avoid divergent NCA interpretations and regulatory arbitrage. It also supports EU-level advocacy to exclude Class 2 investment firms, noting limited systemic relevance. ALFI flags that the draft extends the 2019 outsourcing GL from “outsourcing” to all subcontracting/delegation, including internally delegated activities, and urges restraint given overlapping frameworks under UCITS V/AIFMD (incl. AIFMD II).

TPSP definition & proportionality: The definition (“undertaking providing or supporting a function”) is considered over-broad. ALFI seeks explicit proportionality and the ability for firms to self-assess inclusion. It proposes exemptions for (i) regulated financial entities acting as delegates already supervised under sectoral rules and (ii) financial data providers (mirroring their exclusion from DORA).

Alignment with DORA. ALFI requests tight alignment on

(i) critical/important functions (CIFs) (use DORA Recital 70 test),

(ii) Register of Information fields/timelines (single unified register for ICT & non-ICT TPSPs),

(iii) pre-contractual/on-boarding requirements, and (iv) exit strategy wording (include “no alternative provider” cases). It asks to remove the 5-year retention of terminated contracts from the ROI (dropped in DORA RTS FAQs) and to limit external reporting to CIF-supporting TPSPs only (maintaining a full internal register).

Contracting

To ease repapering, ALFI proposes an enforceable minimum standard clause set (consistent with DORA L2).

Annex I

The non-exhaustive TPSP function list should distinguish core delegated functions from ancillary/consulting services to preserve a risk-based approach.

Transition

ALFI asks for flexible transition allowing changes at contract renewal cycles.

Version française

Le 8 octobre 2025, l'ALFI a publié sa réponse au projet de lignes directrices de l'ABE sur la gestion saine des risques liés aux tiers (hors TIC), saluant la convergence mais mettant en garde contre le glissement de champ d'application et le double emploi avec les règles sectorielles existantes et la DORA.

Champ d'application et périmètre

L'ALFI demande à l'ABE de préciser sans ambiguïté que les gestionnaires de fonds d'investissement (IFM/ManCos) sont exclus du champ d'application tant au niveau individuel que consolidé, afin d'éviter des interprétations divergentes de la part des autorités nationales compétentes et l'arbitrage réglementaire. Elle soutient également les efforts déployés au niveau de l'UE pour exclure les entreprises d'investissement de catégorie 2, soulignant leur importance systémique limitée. L'ALFI souligne que le projet étend les lignes directrices de 2019 sur l'externalisation de l'« externalisation » à toute sous-traitance/délégation, y compris les activités déléguées en interne, et recommande la prudence compte tenu du chevauchement des cadres réglementaires dans le cadre des directives OPCVM V/AIFMD (y compris AIFMD II).

Définition et proportionnalité des TPSP

La définition (« entreprise fournissant ou soutenant une fonction ») est jugée trop large. L'ALFI demande une proportionnalité explicite et la possibilité pour les entreprises d'auto-évaluer leur inclusion. Elle propose des exemptions pour (i) les entités financières réglementées agissant en tant que délégataires déjà supervisées en vertu de règles sectorielles et (ii) les fournisseurs de données financières (reflétant leur exclusion de la DORA).

Alignement sur la DORA

L'ALFI demande un alignement strict sur :

(i) fonctions critiques/importantes (CIF) (utiliser le test DORA Recital 70),

(ii) registre des champs d'information/délais (registre unique unifié pour les TPSP TIC et non TIC),

(iii) exigences précontractuelles/d'intégration, et (iv) formulation de la stratégie de sortie (inclure les cas « sans autre fournisseur »). Elle demande de supprimer la conservation pendant 5 ans des contrats résiliés du registre des informations (supprimée dans la FAQ sur les RTS de la DORA) et de limiter les rapports externes aux seuls TPSP prenant en charge les CIF (en conservant un registre interne complet).

Contrats

Afin de faciliter la refonte des documents, l'ALFI propose un ensemble de clauses minimales exécutoires (conformes à la DORA L2).

Annexe I

La liste non exhaustive des fonctions des TPSP devrait distinguer les fonctions déléguées essentielles des services auxiliaires/de conseil afin de préserver une approche fondée sur les risques.

Transition

L'ALFI demande une transition flexible permettant des changements lors des cycles de renouvellement des contrats.

 

PAYMENTS

ABBL publishes a press release on instant payments and Verification of Payee / ABBL publie un communiqué de presse sur les paiements instantanés et la vérification du bénéficiaire

CACEIS

On 7 October 2025, ABBL published a press release on instant payments across the SEPA area together with the new Verification of Payee (VoP) system, completing the EU-wide transition to faster and safer euro credit transfers.

Under the Instant Payments Regulation, all payment service providers (PSPs) in the euro area have been required since 9 January 2025 to receive instant credit transfers in euros, and as of 9 October 2025, they must also be able to send them. This milestone ensures that euro transfers can be executed within seconds, 24 hours a day, seven days a week, enhancing customer convenience and market efficiency across SEPA.

In parallel, the Verification of Payee mechanism, introduced following a European Commission initiative, aims to strengthen consumer protection and fight payment fraud. Before a transfer is executed, the system automatically checks the match between the recipient’s name and IBAN, returning one of four messages — Match, Close match, No match, or Verification not possible. This helps prevent misdirected payments and reduces fraud such as authorised push payment (APP) scams or identity spoofing.

The ABBL notes that both payers and recipients have an active role to play in ensuring accuracy and maintaining trust in digital transactions. Implementation required substantial investment and coordination among Luxembourg banks to ensure real-time verification and system interoperability at EU level.

These developments mark a key step toward a unified, secure, and efficient European payments landscape, aligned with the EU’s retail payments strategy, PSD2/PSD3 evolution, and broader digital finance agenda.

Version française

Le 7 octobre 2025, l'ABBL a publié un communiqué de presse sur les paiements instantanés dans la zone SEPA ainsi que sur le nouveau système de vérification du bénéficiaire (VoP), achevant ainsi la transition à l'échelle de l'UE vers des virements en euros plus rapides et plus sûrs.

En vertu du règlement sur les paiements instantanés, tous les prestataires de services de paiement (PSP) de la zone euro sont tenus, depuis le 9 janvier 2025, d'accepter les virements instantanés en euros et, à compter du 9 octobre 2025, ils devront également être en mesure de les envoyer. Cette étape importante garantit que les virements en euros peuvent être exécutés en quelques secondes, 24 heures sur 24 et 7 jours sur 7, ce qui améliore le confort des clients et l'efficacité du marché dans l'ensemble de la zone SEPA.

Parallèlement, le mécanisme de vérification du bénéficiaire, introduit à la suite d'une initiative de la Commission européenne, vise à renforcer la protection des consommateurs et à lutter contre la fraude aux paiements. Avant qu'un virement ne soit exécuté, le système vérifie automatiquement la correspondance entre le nom du bénéficiaire et son IBAN, et renvoie l'un des quatre messages suivants : « Correspondance », « Correspondance proche », « Aucune correspondance » ou « Vérification impossible ». Cela permet d'éviter les paiements erronés et de réduire les fraudes telles que les escroqueries par virement autorisé (APP) ou l'usurpation d'identité.

L'ABBL note que les payeurs et les bénéficiaires ont un rôle actif à jouer pour garantir l'exactitude et maintenir la confiance dans les transactions numériques. La mise en œuvre a nécessité des investissements importants et une coordination entre les banques luxembourgeoises afin d'assurer la vérification en temps réel et l'interopérabilité des systèmes au niveau de l'UE.

Ces développements marquent une étape clé vers un paysage européen des paiements unifié, sécurisé et efficace, aligné sur la stratégie de l'UE en matière de paiements de détail, l'évolution des directives PSD2/PSD3 et le programme plus large en matière de finance numérique.

 

ABBL publishes a press release on the Verification of Payee / ABBL publie un communiqué de presse sur la vérification du bénéficiaire (Verification of Payee)

CACEIS

On 22 October 2025, ABBL published a press release on the Verification of Payee:

Luxembourg’s financial sector completed implementation of Verification of Payee (VoP) on 9 Oct 2025, aligning with the EU Instant Payments initiative. VoP checks whether the recipient name matches the IBAN before a transfer executes, aiming to cut APP fraud and misdirected payments. Despite a tight 18-month window and cross-border dependencies, ABBL reports the rollout was well managed across banks and PSPs, with the main friction in foreign transfers where counterpart readiness lags.

Early KPIs since launch (ABBL sample):

  • 60% Match
  • 19% Close match
  • 14% No match
  • 7% Verification not possible

ABBL advises consumers to clean beneficiary data to reduce mismatches. Operationally, firms upgraded 24/7 infrastructures, real-time liquidity, continuous AML/sanctions screening, and cybersecurity controls. The go-live coincided with Cybersecurity Week Luxembourg, underlining the trust and consumer protection angle.

Version française

Le 22 octobre 2025, l'ABBL a publié un communiqué de presse sur la vérification du bénéficiaire :

Le secteur financier luxembourgeois a achevé la mise en œuvre de la vérification du bénéficiaire (VoP) le 9 octobre 2025, conformément à l'initiative de l'UE sur les paiements instantanés. La VoP vérifie si le nom du destinataire correspond à l'IBAN avant l'exécution d'un virement, dans le but de réduire la fraude APP et les paiements erronés. Malgré un délai serré de 18 mois et des dépendances transfrontalières, l'ABBL indique que le déploiement a été bien géré par les banques et les prestataires de services de paiement, la principale difficulté résidant dans les virements internationaux où la préparation des contreparties est en retard.

Indicateurs clés de performance depuis le lancement (échantillon ABBL) :

  • 60 % de correspondances
  • 19 % de correspondances proches
  • 14 % de non-correspondances
  • 7 % Vérification impossible

L'ABBL conseille aux consommateurs de nettoyer les données des bénéficiaires afin de réduire les incohérences. Sur le plan opérationnel, les entreprises ont mis à niveau leurs infrastructures 24 heures sur 24, 7 jours sur 7, leur liquidité en temps réel, leur filtrage continu en matière de lutte contre le blanchiment d'argent et de sanctions, ainsi que leurs contrôles de cybersécurité. La mise en service a coïncidé avec la Semaine de la cybersécurité au Luxembourg, soulignant l'importance de la confiance et de la protection des consommateurs.

 

ABBL publishes a press release on tokenized IBANs / ABBL publie un communiqué de presse sur les IBAN tokenisés

CACEIS

On 8 October 2025, the ABBL published a press release on tokenized IBANs. The ABBL highlights the emerging concept of tokenised IBANs as a potential innovation in secure digital payments. Currently under discussion within European payment forums such as the European Payments Council (EPC), the initiative aims to strengthen data protection and payment security by replacing a real IBAN with an anonymised token that preserves full payment functionality.

A tokenised IBAN is a unique identifier dynamically linked to a genuine account but never exposes the underlying IBAN during the transaction process. Similar to card-payment tokenisation, the concept reduces the exchange of sensitive data, limits exposure in case of breaches, and aligns with GDPR principles of data minimisation and pseudonymisation.

Use cases include:

FinTech and marketplaces: large-volume payment processors could issue tokens per merchant or transaction, protecting vendors’ data and streamlining reconciliation.

Corporate treasuries and payment factories: multinationals managing complex multi-jurisdictional cash structures could use tokens to simplify workflows, strengthen internal auditability, and protect sensitive accounts in high-value or cross-border operations.

While still conceptual, tokenised IBANs combine innovation, compliance, and interoperability, mirroring the EU’s digital-finance priorities under PSD3 and the Retail Payments Strategy. The approach also supports open-banking and embedded-finance models by enhancing trust and reducing systemic cyber and fraud risks.

For Luxembourg, a financial centre emphasising confidentiality and cross-border efficiency, this model represents a natural extension of its secure payments and data-protection expertise. The ABBL underscores that tokenised IBANs exemplify the industry’s commitment to security by design, interoperability, and digital trust as foundations for Europe’s next-generation payment infrastructure.

Version française

Le 8 octobre 2025, l'ABBL a publié un communiqué de presse sur les IBAN tokenisés. L'ABBL met en avant le concept émergent des IBAN tokenisés comme une innovation potentielle dans le domaine des paiements numériques sécurisés. Actuellement en discussion au sein de forums européens sur les paiements tels que le Conseil européen des paiements (EPC), cette initiative vise à renforcer la protection des données et la sécurité des paiements en remplaçant un IBAN réel par un jeton anonymisé qui préserve toutes les fonctionnalités de paiement.

Un IBAN tokenisé est un identifiant unique lié de manière dynamique à un compte réel, mais qui n'expose jamais l'IBAN sous-jacent pendant le processus de transaction. Semblable à la tokenisation des paiements par carte, ce concept réduit l'échange de données sensibles, limite l'exposition en cas de violation et s'aligne sur les principes du RGPD en matière de minimisation et de pseudonymisation des données.

Voici quelques exemples d'utilisation :

FinTech et places de marché : les processeurs de paiements à grand volume pourraient émettre des jetons par commerçant ou par transaction, protégeant ainsi les données des vendeurs et rationalisant le rapprochement.

Trésoreries d'entreprise et centres de paiement : les multinationales qui gèrent des structures de trésorerie complexes relevant de plusieurs juridictions pourraient utiliser des jetons pour simplifier les flux de travail, renforcer l'auditabilité interne et protéger les comptes sensibles dans le cadre d'opérations de grande valeur ou transfrontalières.

Bien qu'ils en soient encore au stade conceptuel, les IBAN tokenisés allient innovation, conformité et interopérabilité, reflétant ainsi les priorités de l'UE en matière de finance numérique dans le cadre de la PSD3 et de la stratégie de paiement de détail. Cette approche soutient également les modèles d'open banking et de finance intégrée en renforçant la confiance et en réduisant les risques systémiques liés à la cybercriminalité et à la fraude.

Pour le Luxembourg, place financière qui met l'accent sur la confidentialité et l'efficacité transfrontalière, ce modèle représente une extension naturelle de son expertise en matière de paiements sécurisés et de protection des données. L'ABBL souligne que les IBAN tokenisés illustrent l'engagement du secteur en faveur de la sécurité dès la conception, de l'interopérabilité et de la confiance numérique comme fondements de l'infrastructure de paiement européenne de nouvelle génération.

 

SANCTIONS/RESTRICTIVE MEASURES

CSSF publishes Annex of Circular CSSF 22/822 on FATF high-risk & monitored jurisdictions / La CSSF publie l’annexe de la Circulaire CSSF 22/822 relative aux juridictions à haut risque et sous surveillance du GAFI

CACEIS

On 27 October 2025, the CSSF updated the Annex to Circular 22/822 to align Luxembourg obligations with the latest FATF public statements. The Annex distinguishes:
(I) High-risk jurisdictions subject to a call for action (apply EDD and, where appropriate, counter-measures):

  • DPRK: FATF maintains its call for counter-measures due to strategic AML/CFT deficiencies and serious PF risks. Jurisdictions must terminate correspondent relationships with DPRK banks, close DPRK bank offices, assess heightened PF risk, and limit relationships/transactions with DPRK persons.
  • Iran: Since action-plan items remain outstanding, FATF requires effective, proportionate counter-measures. October 2025 Plenary reiterates calls to refuse establishment of Iranian FI offices/subsidiaries/branches and prohibit establishing branches/ROs in Iran; maintain EDD, enhanced monitoring, and increased external audit/suspicious reporting for Iranian subsidiaries/branches. FATF may re-assess and could re-suspend counter-measures upon sufficient progress.
  • Myanmar: Action plan expired; EDD proportionate to risk required since Oct 2022, safeguarding humanitarian/NPO/remittance flows. If no progress by Feb 2026, FATF will consider counter-measures.

(II) Jurisdictions under increased monitoring (“grey list”):

  • Algeria, Angola, Bolivia, British Virgin Islands, Bulgaria, Cameroon, Côte d’Ivoire, DR Congo, Haiti, Kenya, Lao PDR, Lebanon, Monaco, Namibia, Nepal, South Sudan, Syria, Venezuela, Vietnam, Yemen, Burkina Faso, Mozambique, Nigeria, South Africa. (The Annex notes some jurisdictions are no longer under increased monitoring but continue working with FATF/FSRBs.)

Required measures for Luxembourg “Professionals”:

  • For DPRK: EDD + monitoring; notify CSSF for any DPRK correspondent banking; maintain enhanced SAR mechanisms to the FIU.
  • For Iran: EDD (incl. correspondent); notify CSSF for any Iranian correspondent banking or third-party introducers/outsourcing in Iran; enhance monitoring, suspicious reporting, and audits.
  • For Myanmar: EDD, special attention to relationships/transactions; maintain enhanced SAR mechanisms.

Across all listed states: give special attention, calibrate controls/trigger patterns, and increase frequency and timing of reviews.

Version française

Le 27 octobre 2025, la CSSF a mis à jour l'annexe à la circulaire 22/822 afin d'aligner les obligations luxembourgeoises sur les dernières déclarations publiques du GAFI. L'annexe distingue :
(I) Les juridictions à haut risque faisant l'objet d'un appel à l'action (application de mesures de vigilance renforcées et, le cas échéant, de contre-mesures) :

  • RPDC : le GAFI maintient son appel à des contre-mesures en raison de lacunes stratégiques en matière de LBC/FT et de risques graves de financement du terrorisme. Les juridictions doivent mettre fin à leurs relations de correspondance avec les banques nord-coréennes, fermer les bureaux bancaires nord-coréens, évaluer le risque accru de financement du terrorisme et limiter les relations/transactions avec les personnes nord-coréennes.
  • Iran : les éléments du plan d'action restant en suspens, le GAFI exige des contre-mesures efficaces et proportionnées. La plénière d'octobre 2025 réitère ses appels à refuser l'établissement de bureaux/filiales/succursales d'institutions financières iraniennes et à interdire l'établissement de succursales/bureaux de représentation en Iran ; à maintenir l'EDD, la surveillance renforcée et l'augmentation des audits externes/déclarations de transactions suspectes pour les filiales/succursales iraniennes. Le GAFI pourrait réévaluer et suspendre à nouveau les contre-mesures si des progrès suffisants sont réalisés.
  • Myanmar : le plan d'action a expiré ; une vigilance renforcée proportionnée au risque est requise depuis octobre 2022, afin de préserver les flux humanitaires/ONG/transferts de fonds. Si aucun progrès n'est constaté d'ici février 2026, le GAFI envisagera des contre-mesures.

(II) Juridictions faisant l'objet d'une surveillance renforcée (« liste grise ») :

  • Algérie, Angola, Bolivie, Îles Vierges britanniques, Bulgarie, Cameroun, Côte d'Ivoire, République démocratique du Congo, Haïti, Kenya, République démocratique populaire lao, Liban, Monaco, Namibie, Népal, Soudan du Sud, Syrie, Venezuela, Vietnam, Yémen, Burkina Faso, Mozambique, Nigeria, Afrique du Sud. (L'annexe indique que certaines juridictions ne font plus l'objet d'une surveillance renforcée, mais continuent de collaborer avec le GAFI/les FSRB.)

Mesures requises pour les « professionnels » luxembourgeois :

  • Pour la RPDC : EDD + surveillance ; informer la CSSF de toute relation bancaire correspondante avec la RPDC ; maintenir des mécanismes SAR renforcés auprès de la CRF.
  • Pour l'Iran : EDD (y compris correspondant) ; informer la CSSF de toute relation bancaire correspondante avec l'Iran ou de tout intermédiaire tiers/sous-traitant en Iran ; renforcer la surveillance, les déclarations de transactions suspectes et les audits.
  • Pour le Myanmar : EDD, attention particulière aux relations/transactions ; maintenir des mécanismes SAR renforcés.

Pour tous les États répertoriés : accorder une attention particulière, calibrer les contrôles/modèles de déclenchement et augmenter la fréquence et le calendrier des examens.

 

CSSF publishes the updated FAQ regarding International Financial Sanctions / La CSSF publie la FAQ mise à jour relative aux sanctions financières internationales

CACEIS

On 29 October 2025, the CSSF published the updated FAQ regarding International Financial Sanctions.

Questions 4, 8, 12, 13, 14, 15, 16, 17 and 18 were updated:

  • Q4 – Where shall the professional send the report regarding financial restrictive measures?

Professionals must notify the Ministry of Finance, and send a copy at the same time to the CSSF. Email addresses are given (sanctions@fi.etat.lu and admin-lcf@cssf.lu) or via post to: Ministère des Finances, 3 Rue de la Congrégation, L-1352 Luxembourg. Reporting applies even for attempted transactions.

  • Q8 – Does a consolidated list of all persons/entities under financial sanctions exist?

CSSF says there is no single unique list, but CSSF website sections (Financial Crime / International Financial Sanctions + War in Ukraine) contain consolidated material and relevant links (including EU lists) and also check answer to Question 8 of the FAQ on AML/CFT under the following link: FAQ_AMLCTF.pdf (cssf.lu)

  • Q9- What must a professional do if there is also a suspicion of Money Laundering/Terrorist Financing or sanctions circumvention?

If, in addition to a sanctions situation, the professional also detects a suspicion of money-laundering, terrorism financing, predicate offence, or circumvention (even attempted) , they must immediately file an STR to the Luxembourg FIU via goAML. This is in addition to the sanctions notifications. Guidance on how to file is available on the FIU website.

  • Q12 – Reporting deposits exceeding EUR 100,000 for Russia/Belarus: to whom?

Credit institutions must send this information to the Ministry of Finance and copy the CSSF simultaneously. This dual reporting is mandatory to ensure enforcement and supervisory oversight under EU sanctions and Luxembourg rules (CSSF Reg 12-02 + Law 2020).

  • Q13 – Who reports when several financial sector professionals are contractually involved?

Every professional must report independently. Even if another party in the chain has reported, you cannot rely on them. Each entity must notify the Ministry AND copy CSSF.

  • Q14 – Can sanctions apply if a sanctioned person holds less than 50% of shares?

Yes. Even below 50% ownership, sanctions apply if there is effective control. Control is not limited to pure ownership, de facto control also triggers sanctions.

  • Q15 – Do sanctions apply if ownership is indirect?

Yes. If a sanctioned person indirectly owns or controls ?50%, the entity is considered sanctioned. Indirect structures count (to avoid circumvention).

  • Q16 – What to do in case of homonym (name match)?

Professionals must verify identity carefully (DOB, nationality, address, unique IDs). If doubt persists , contact the Ministry and suspend any transaction until identity is clarified.

  • Q17 – What does “without delay” mean?

“Without delay” means that as soon as the professional has reasonable grounds to suspect that a person/entity is sanctioned, financing terrorism or proliferation, the freezing of assets and restrictive measures must be applied immediately — not hours or days later.

The Ministry of Finance clarifies that ideally this should occur within hours of a UN designation (1267 Committee, 1988 Committee, 1718 Committee, 1737 Committee). This interpretation comes from FATF recommendations and the Ministry’s own guidelines.

This term must be understood in the context of preventing flight or dissipation of funds, especially funds that could be used for terrorism, proliferation of weapons of mass destruction, or sanctions evasion.

Once identified (screening / transactions monitoring / any control), the professional must:

  • freeze assets immediately
  • inform the Ministry of Finance immediately
  • send the copy simultaneously to CSSF (Art. 33 (2) CSSF Reg. 12-02)

Professionals must therefore have procedures, escalation channels and operational systems designed so that “without delay” is operationally possible.

  • Q18 – What specific controls for proliferation financing (PF)?

Professionals should apply specific PF controls (monitoring, risk assessment, detection of dual-use goods risks) and align with FATF June 2025 guidance. Coordination with supervisors is expected.

Version française

Le 29 octobre 2025, la CSSF a publié la mise à jour de la FAQ relative aux sanctions financières internationales.

Les questions 4, 8, 12, 13, 14, 15, 16, 17 et 18 ont été mises à jour :

  • Q4 – Où le professionnel doit-il envoyer le rapport concernant les mesures restrictives financières ?

Les professionnels doivent informer le ministère des Finances et envoyer simultanément une copie à la CSSF. Les adresses électroniques sont indiquées (sanctions@fi.etat.lu et admin-lcf@cssf.lu) ou par courrier postal à : Ministère des Finances, 3 Rue de la Congrégation, L-1352 Luxembourg. L'obligation de déclaration s'applique également aux tentatives de transactions.

  • Q8 – Existe-t-il une liste consolidée de toutes les personnes/entités faisant l'objet de sanctions financières ?

La CSSF indique qu'il n'existe pas de liste unique, mais les sections du site web de la CSSF (Criminalité financière / Sanctions financières internationales + Guerre en Ukraine) contiennent des informations consolidées et des liens pertinents (y compris les listes de l'UE). Vous pouvez également consulter la réponse à la question 8 de la FAQ sur la lutte contre le blanchiment d'argent et le financement du terrorisme (AML/CFT) en cliquant sur le lien suivant : FAQ_AMLCTF.pdf (cssf.lu)

  • Q9 – Que doit faire un professionnel s'il soupçonne également un cas de blanchiment d'argent/financement du terrorisme ou de contournement des sanctions ?

Si, en plus d'une situation de sanctions, le professionnel détecte également un soupçon de blanchiment d'argent, de financement du terrorisme, d'infraction principale ou de contournement (même tenté), il doit immédiatement déposer un STR auprès de la CRF luxembourgeoise via goAML. Cela s'ajoute aux notifications de sanctions. Des conseils sur la manière de procéder sont disponibles sur le site web de la CRF.

  • Q12 – Déclaration des dépôts supérieurs à 100 000 euros pour la Russie/le Bélarus : à qui ?

Les établissements de crédit doivent envoyer ces informations au ministère des Finances et en transmettre simultanément une copie à la CSSF. Cette double déclaration est obligatoire afin de garantir l'application et la surveillance des sanctions de l'UE et des règles luxembourgeoises (règlement CSSF 12-02 + loi 2020).

  • Q13 – Qui effectue la déclaration lorsque plusieurs professionnels du secteur financier sont contractuellement impliqués ?

Chaque professionnel doit effectuer sa déclaration de manière indépendante. Même si un autre acteur de la chaîne a déjà effectué sa déclaration, vous ne pouvez pas vous en remettre à lui. Chaque entité doit informer le ministère ET en adresser une copie à la CSSF.

  • Q14 – Des sanctions peuvent-elles s'appliquer si une personne sanctionnée détient moins de 50 % des parts ?

Oui. Même en dessous de 50 % de participation, des sanctions s'appliquent en cas de contrôle effectif. Le contrôle ne se limite pas à la simple propriété, le contrôle de fait déclenche également des sanctions.

  • Q15 – Des sanctions s'appliquent-elles si la propriété est indirecte ?

Oui. Si une personne sanctionnée détient ou contrôle indirectement ? 50 %, l'entité est considérée comme sanctionnée. Les structures indirectes sont prises en compte (pour éviter tout contournement).

  • Q16 – Que faire en cas d'homonymie (nom identique) ?

Les professionnels doivent vérifier soigneusement l'identité (date de naissance, nationalité, adresse, identifiants uniques). En cas de doute persistant, contactez le ministère et suspendez toute transaction jusqu'à ce que l'identité soit clarifiée.

  • Q17 – Que signifie « sans délai » ?

« Sans délai » signifie que dès que le professionnel a des motifs raisonnables de soupçonner qu'une personne/entité fait l'objet de sanctions, finance le terrorisme ou la prolifération, le gel des avoirs et les mesures restrictives doivent être appliqués immédiatement, et non quelques heures ou jours plus tard.

Le ministère des Finances précise que, dans l'idéal, cela devrait se produire dans les heures qui suivent une désignation par l'ONU (Comité 1267, Comité 1988, Comité 1718, Comité 1737). Cette interprétation découle des recommandations du GAFI et des propres lignes directrices du ministère.

Ce terme doit être compris dans le contexte de la prévention de la fuite ou de la dissipation de fonds, en particulier ceux qui pourraient être utilisés à des fins de terrorisme, de prolifération d'armes de destruction massive ou de contournement des sanctions.

Une fois identifié (filtrage / surveillance des transactions / tout contrôle), le professionnel doit :

  • geler immédiatement les avoirs
  • informer immédiatement le ministère des Finances
  • envoyer simultanément une copie à la CSSF (art. 33 (2) du règlement CSSF 12-02)

Les professionnels doivent donc disposer de procédures, de canaux d'escalade et de systèmes opérationnels conçus de manière à ce que le terme « sans délai » soit opérationnellement possible.

  • Q18 – Quels sont les contrôles spécifiques pour le financement de la prolifération (PF) ?

Les professionnels doivent appliquer des contrôles PF spécifiques (surveillance, évaluation des risques, détection des risques liés aux biens à double usage) et se conformer aux directives du GAFI de juin 2025. Une coordination avec les autorités de surveillance est attendue.

NETHERLANDS

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

DNB publishes Update FATF-warning lists October 2025

CACEIS

On 28 October 2025, DNB published a news item titled “FATF released an update of its ‘grey’ and ‘black’ lists”, informing financial institutions of the latest Financial Action Task Force (FATF) updates concerning jurisdictions with strategic deficiencies in anti-money laundering and combating the financing of terrorism (AML/CFT) regimes. The FATF issues these lists three times a year, distinguishing between two categories:

  • High-Risk Jurisdictions subject to a Call for Action (the “black list”) – countries with severe AML/CFT shortcomings that have not committed to corrective measures.
  • Jurisdictions under Increased Monitoring (the “grey list”) – countries that have committed to address identified deficiencies.

As of October 2025, the black list includes Iran, North Korea, and Myanmar. FATF reaffirmed its February 2020 call for countermeasures on Iran, citing ongoing terrorist and proliferation financing risks. DNB and the Dutch Ministry of Finance remind institutions to apply enhanced due diligence (EDD) on related business relationships and transactions, such as collecting additional information ex ante, intensifying transaction monitoring, and investigating suspicious patterns. Financial institutions must also promptly report all unusual transactions involving Iran to the FIU-NL.

North Korea remains on the list due to persistent AML/CFT deficiencies and proliferation concerns, requiring strict compliance with UN/EU sanctions. Myanmar continues under the call for action for failing to address most items in its action plan, with FATF urging proportionate EDD measures while ensuring humanitarian and legitimate flows are not disrupted.

The grey list now comprises 20 jurisdictions, including the British Virgin Islands, Bulgaria, Kenya, Lebanon, the Philippines, and Vietnam. Financial institutions are expected to consider these countries’ specific circumstances when applying AML/CFT risk assessments and controls.

 

Overheid publishes Act of 11 June 2025 Amending AML/CFT Laws and Civil Code on Cash Payment Limits and Consumer Rights (Money Laundering Action Plan Act)

CACEIS

BACKGROUND

On 11 June 2025, the King of the Netherlands signed into law the Wet plan van aanpak witwassen, published in the Staatsblad (No. 262 of 9 October 2025). The law amends the Wet ter voorkoming van witwassen en financieren van terrorisme (Wwft) — the Dutch Anti-Money Laundering and Counter-Terrorist Financing Act — and Book 6 of the Dutch Civil Code (Burgerlijk Wetboek).

This legislative reform follows a broader political and regulatory initiative aimed at strengthening the national framework against money laundering and aligning domestic standards with EU-level AML/CFT developments, including the forthcoming EU AML Regulation and the Transfer of Funds Regulation for crypto-assets.

The key policy objectives of the new law are twofold: to tighten restrictions on large cash transactions that may facilitate money laundering and to safeguard consumers’ right to make small cash payments.

WHAT'S NEW?

The Wet plan van aanpak witwassen introduces a nationwide ban on cash payments of €3,000 or more for goods in the context of professional or business transactions. The measure lowers the previous €10,000 threshold under the Wwft, substantially reducing the scope for anonymous large-value cash transactions.

A new section, Article 1f, is inserted into the Wwft, establishing that institutions or traders operating in or from the Netherlands may neither make nor accept cash payments of €3,000 or more (or the equivalent in foreign currency) for goods, regardless of whether the payment occurs in a single transaction or through multiple related operations. This prohibition applies to professional dealers and businesses defined in Article 1a(4)(i), (k), and (p) of the Wwft.

Consequential amendments are made throughout the Wwft to remove outdated references to the former €10,000 threshold and to integrate the new article consistently across the law’s structure. Related provisions in Articles 29 and 30 are also updated to reference the new cash payment prohibition.

Furthermore, Article 113 of Book 6 of the Dutch Civil Code is replaced to guarantee consumers the right to make small cash payments. It provides that a consumer debtor—a natural person acting outside a professional or business activity—has the right to settle obligations in cash up to the €3,000 threshold established under the Wwft. Businesses must accept such payments unless a specific exemption is introduced by general administrative decree, for example, on grounds of security or the nature of the business activity.

The law also mandates an evaluation clause: within three years of entry into force, the Minister of Finance, in coordination with the Minister of Justice and Security, must submit to Parliament a report assessing the effectiveness and impact of the new measures in practice.

Finally, the legislation provides coordination mechanisms to ensure consistency with the Implementation Act on the Transfer of Funds and Crypto-Asset Transfers Regulation (36 526), which complements EU Regulation (EU) 2023/1113. Cross-references will be automatically adjusted depending on the order of entry into force between the two acts.

WHAT'S NEXT?

The Wet plan van aanpak witwassen will enter into force on a date set by royal decree, allowing for phased implementation of specific provisions. Once effective, businesses engaged in the sale of goods must ensure that no cash transactions equal to or exceeding €3,000 are conducted, either directly or indirectly.

The law marks a significant tightening of the Dutch AML regime, reinforcing efforts to curb money laundering through high-value cash transactions while maintaining consumer access to small-scale cash payments.

Financial institutions, designated non-financial businesses and professions (DNFBPs), and compliance officers will need to update their internal AML policies and controls to reflect the new prohibition threshold. Additionally, the forthcoming three-year evaluation will determine whether the lower cash limit effectively deters money laundering without unduly impacting legitimate consumer transactions.

By codifying both a strict cash payment ban and a statutory consumer right to use small cash amounts, the Netherlands takes a balanced approach that strengthens financial transparency while preserving practical payment flexibility in everyday commerce.

 

OTHER - MACROECONOMIC FRAMEWORK

DNB publishes new pension contract: implications for international interest rate markets

CACEIS

On 22 October 2025, the DNB published a background analysis titled “New pension contract: implications for international interest rate markets”, assessing how the transition to the new Dutch pension contract could affect investment behaviour and long-term interest rates.

The shift to the new pension framework will lead Dutch pension funds to adjust their investment strategies, reflecting a more individualised risk-return approach. For younger participants, funds intend to reduce exposure to long-term government bonds and interest rate swaps, reallocating towards riskier growth assets such as equities. For older members and retirees, portfolios will remain weighted towards low-risk fixed-income instruments to ensure stability. Overall, this implies a decline in demand for long-term (?25 years) bonds and swaps, potentially affecting interest rate markets.

Analysts estimate that pension funds may reduce long-term bond and swap holdings by €100–150 billion, a relatively small but market-relevant adjustment given the total market size of approximately €900 billion in long-term government bonds and €300 billion in interest rate swaps. However, uncertainties remain — including market conditions at the transition date, varying fund strategies, and potential pre-transition hedging activities to protect funding ratios.

The impact on market stability is expected to be moderate, as several factors will disperse trading pressure:

  • Funds will have 12 months post-transition to rebalance portfolios.
  • Transitions will occur in two main waves (1 January 2026 and 1 January 2027).
  • Markets have long anticipated these adjustments, with speculative positioning already absorbed.

In the short term, the transition may cause upward pressure on long-term rates (30-year maturities), though liquidity and adaptive issuance strategies are likely to mitigate systemic effects. DNB concludes that the European interest rate markets are sufficiently robust to absorb the shift and re-establish equilibrium over time.

 

OTHER - OTHER

AFM publishes important points of attention for reporting for 2025

CACEIS

On 24 October 2025, the AFM published the news item “Important points of attention for reporting for 2025”, urging listed companies to pay particular attention to the European Securities and Markets Authority (ESMA)’s supervisory priorities and to ensure transparent sustainability reporting in their upcoming 2025 financial and non-financial disclosures. The AFM emphasises that these priorities are equally relevant for audit committees overseeing the reporting process and for audit firms engaged in external assurance.

The publication outlines three key areas of focus:
1. ESMA’s 2025 supervisory priorities. These cover:

  • Financial reporting: proper disclosure of geopolitical risks and uncertainties, and accurate segment information under IFRS 8.
  • Sustainability reporting: application of materiality assessments under the European Sustainability Reporting Standards (ESRS), and clarity on the scope and structure of the sustainability report.
  • European Single Electronic Format (ESEF): correct tagging and avoidance of common errors, particularly in cash flow statement presentation.

ESMA also stresses the importance of connectivity between financial and sustainability information, alignment with recent IFRS developments, and consistency in the use of Alternative Performance Measures (APMs).

2. Transparency on impacts, risks, and opportunities (IROs): The AFM calls on companies to provide a clear explanation of how their activities affect and are affected by environmental and social factors. These disclosures should feed into a robust double materiality analysis, a central concept under the Corporate Sustainability Reporting Directive (CSRD).
3. Corporate Governance Code update: The AFM highlights that the revised Corporate Governance Code (March 2025) introduces the Risk Management Statement (VOR), clarifying the responsibilities of directors and supervisory boards regarding risk oversight.

 

RECOVERY & RESOLUTION

Overheid publishes Implementation Act on the Recovery and Resolution of Insurers

CACEIS

On 20 October 2025, the Overheid published the Implementation Act on the Recovery and Resolution of Insurers, a bill designed to transpose Directive (EU) 2025/1 on the Recovery and Resolution of Insurers (IRRD). The Directive introduces an EU-wide framework granting powers to national resolution authorities — in the Netherlands, De Nederlandsche Bank (DNB) — to ensure the orderly recovery or resolution of insurers in case of financial distress, while safeguarding policyholders, financial stability, and public funds.

The Netherlands already has a domestic framework under the Recovery and Resolution of Insurers Act 2019, which sets out tools for intervention, resolution planning, and coordination with supervisory authorities. However, Directive (EU) 2025/1 introduces harmonised requirements across Member States that necessitate legislative adjustments.

The bill amends primarily the Financial Supervision Act (Wft) and the Bankruptcy Act, aligning national law with EU requirements on:

  • Resolution planning and preventive measures, including early intervention powers for DNB;
  • Resolution tools, such as portfolio transfer, bridge undertaking, and asset separation mechanisms;
  • Group-level coordination and cross-border cooperation to ensure consistent application of recovery and resolution measures across the EU;
  • Funding arrangements, including resolution financing through national or EU-level mechanisms;
  • Procedural and legal protections, such as “no creditor worse off” safeguards and judicial review rights.

The proposed law retains the key principles of proportionality and policyholder protection embedded in the 2019 Act but ensures full alignment with the European Insurance Recovery and Resolution Directive (IRRD).

 

REPORTING

Overheid publishes Implementation Act on the Revision of the Markets in Financial Instruments Directive 2014

CACEIS

On 20 October 2025, the Overheid published the Implementation Act on the Revision of the Markets in Financial Instruments Directive 2014, a bill amending the Financial Supervision Act (Wft) to transpose Directive (EU) 2024/790 (amending MiFID II) and to ensure alignment with Regulation (EU) 2024/791 (amending MiFIR). The legislative package forms part of the European Commission’s Capital Markets Union (CMU) initiative and aims to enhance market transparency, stability, and investor protection.

The amendments introduce several key measures designed to:

  • Limit violent price movements in financial markets, ensuring more orderly and resilient trading conditions.
  • Increase transparency through improved data accessibility and standardisation across trading venues.
  • Improve the provision of market information to participants by establishing a centralised consolidated tape, which will aggregate real-time trading data from multiple venues into a single, comprehensive source.

The consolidated tape is a major structural reform intended to provide equal access to market data for all participants, reduce information asymmetries, and foster fairer competition between trading venues. The bill also introduces adjustments to support national supervisory enforcement under the Financial Supervision Act (Wft) and will be supplemented by an implementation decree that will amend related subordinate legislation.

This implementation ensures that Dutch legislation aligns with the EU-wide framework applicable to investment firms, trading venues, and market infrastructures, while contributing to a more transparent and efficient single market for financial instruments.

SPAIN

FINANCIAL INSTRUMENTS

BOE publishes order ECM/1155/2025 on regulating the lending of certain securities and financial instruments by collective investment institutions

CACEIS

BACKGROUND

On the 17 October 2025, the BOE published order ECM/1155/2025 on regulating the lending of certain securities and financial instruments by collective investment institutions.

Order ECM/1155/2025 regulates securities lending by Spanish collective investment institutions (IICs) under Article 30.6 of Law 35/2003. Securities lending lets IICs temporarily transfer portfolio instruments to borrowers in exchange for collateral and possible fees. The order aims to boost returns for investors while ensuring protection and operational security. It sets rules on eligible securities, collateral, internal controls, and depositary oversight. The regulation aligns with EU law, including the UCITS Directive and ESMA guidance, and replaces the 1991 order.

WHAT'S NEW?

The order introduces specific rules and safeguards to standardize securities lending by IICs and protect investors:

  • IICs can now lend eligible securities, including ETFs and money market instruments, following defined rules.
  • Mandatory collateral is required for all lending operations, with detailed rules on coverage, delivery, liquidity, eligible assets, and reinvestment of cash collateral.
  • Managers must ensure risks are captured in their internal risk management procedures, including counterparty selection, collateral control, and operational processes.
  • Borrowers must be financially sound entities domiciled in the EU or OECD, with supervisory cooperation.
  • Managers must disclose lending policies, risks, fees, and income to investors in fund prospectuses and annual reports.
  • Depositaries oversee settlement, custody of collateral, and compliance with lending rules, including internal controls.

WHAT'S NEXT?

The order entered into force the day after publication in the Official State Gazette (17 October 2025).

CNMV may issue additional rules on accounting and reporting for securities lending operations.

 

CNMV publishes conclusions of the European Common Supervisory Action on Sustainability in the Asset Management Sector

CACEIS

On the 13 October 2025, the CNMV published conclusions of the European Common Supervisory Action on Sustainability in the Asset Management Sector.

CNMV published the results of the Common Supervisory Action on the integration of sustainability risks and sustainability-related disclosures in the asset management sector, conducted jointly with ESMA and other national competent authorities. The review evaluated how investment managers comply with the Sustainable Finance Disclosure Regulation (SFDR), the Taxonomy Regulation, and the sustainability provisions of UCITS and AIFMD.

The CNMV reported that overall compliance is satisfactory, given the novelty of the framework, but identified several weaknesses and areas for improvement. Supervisors noted that disclosures often use vague or overly general language, lack completeness, and sometimes omit required Principal Adverse Impact indicators or methodological explanations. Weaknesses were also found in how firms document and integrate sustainability risks, and in how they address breaches or ensure internal consistency across pre-contractual, periodic, and marketing materials.

The review found that some asset managers employ minimal staff dedicated to sustainability, lack metrics linking remuneration policies to sustainability risk integration, and often fail to verify that ESG strategies are based on reliable data. The CNMV emphasised that ambiguous claims, such as stating a product “promotes environmental characteristics,” hinder comparability and increase the risk of greenwashing.

ESMA issued twelve recommendations to national authorities and market participants, encouraging the implementation of clear policies for integrating sustainability risks, ensuring appropriate governance and staff expertise, monitoring entities to mitigate greenwashing, improving remuneration policy transparency, verifying the accuracy of PAI disclosures, and ensuring that sustainability related information, especially product information published online, is clear, fair, non-misleading, and accessible. Authorities are also urged to assess the appropriateness of fund names and to apply all supervisory and enforcement tools available when needed.

The CNMV concluded that it will continue its supervisory work on sustainability matters in coordination with ESMA and other European authorities, taking into account these recommendations to further strengthen compliance and market integrity in sustainable finance.

 

PAYMENTS

BOE publishes amendment to the Resolution of 4 July 2022 approving the uniform conditions of participation in TARGET

CACEIS

On the 2 October 2025, the BOE published amendment to the Resolution of 4 July 2022 approving the uniform conditions of participation in TARGET.

The Resolution amends the Resolution of 4 July 2022 that approved the uniform participation conditions in TARGET-Banco de España, the Spanish component of the Eurosystem’s real-time gross settlement system. This amendment implements the changes introduced by the European Central Bank’s Guideline (EU) 2025/1889, ensuring consistency between national and European regulatory frameworks governing payment systems.

The updated provisions extend participation in TARGET to non-bank payment service providers established within the European Union or the European Economic Area, subject to compliance with the relevant national and EU legal requirements. The resolution also establishes a specific one-day credit facility for central counterparties that meet defined prudential and operational criteria, allowing them temporary access to liquidity without prior approval from the ECB’s Governing Council. Additionally, the amendment introduces the new functionality which enables cross-system and cross-currency instant payments via the TIPS platform, thus enhancing interoperability and efficiency within the Eurosystem’s payment infrastructure.

Further adjustments include technical updates to participation conditions, account management, liquidity limits, and the treatment of payment orders, ensuring proper supervision, security, and operational continuity. The modifications reaffirm the Bank of Spain’s commitment to aligning national payment system operations with the evolving European financial regulations and technological standards.

It entered into force on 6 October 2025.

SWITZERLAND

REPORTING

Swiss Official Journal publishes an erratum to the FINMA OPub Ordinance / Le Journal officiel suisse publie un erratum à l’Ordonnance OPub-FINMA

CACEIS

On 14 October 2025, the Swiss Official Journal published an Erratum in the Official Compilation (RO 2025 616), correcting Annex 2, Table 30.2.2 and Table 39.3 of the FINMA Ordinance on Publication Obligations of Banks and Securities Firms (OPub-FINMA; RS 952.022.2) adopted on 6 March 2024. The correction concerns the risk-weighting grid applicable to credit exposure disclosure by banks in categories 3 to 5. In the original publication (RO 2024 138), the risk-weight buckets listed for certain exposure categories were incomplete, particularly the 60% risk-weight column, which was missing in Table 39.3 for counterparty credit risk disclosure. The erratum amends the presentation of the table to correctly insert the “60” bucket between 50% and 75–85%, aligning with Basel III / Swiss capital adequacy disclosure alignment. The correction ensures that banks’ Pillar 3 publication frameworks reflect the full risk-weighting spectrum and that disclosure obligations are consistent with FINMA Circular 20/1 margin references and the standardised approach to credit risk. The adjustment is technical in nature and does not introduce new disclosure requirements, but corrects the legal table to avoid interpretative ambiguity in the categorisation of exposures, particularly exposures to multilateral development banks, corporates, and banks under risk-weighted disclosure templates. The corrected table must be used immediately, as the erratum enters into force on the date of publication, 14 October 2025. For regulated banks and securities firms using standardised credit risk approaches, the correct classification of exposures in publication templates is required for supervisory reporting accuracy and comparability. This ensures full transparency under Pillar 3 and alignment with international templates (EBA, BCBS).

Version française

Le 14 octobre 2025, le Journal officiel suisse a publié un rectificatif dans la Recueil officiel (RO 2025 616), corrigeant l'annexe 2, tableau 30.2.2 et tableau 39.3 de l'ordonnance de la FINMA sur les obligations de publication des banques et des entreprises d'investissement (OPub-FINMA ; RS 952.022.2) adoptée le 6 mars 2024. La correction concerne la grille de pondération des risques applicable à la publication des expositions de crédit par les banques dans les catégories 3 à 5. Dans la publication originale (RO 2024 138), les catégories de pondération des risques répertoriées pour certaines catégories d'expositions étaient incomplètes, en particulier la colonne de pondération des risques de 60 %, qui manquait dans le tableau 39.3 pour la publication du risque de crédit de contrepartie. L'erratum modifie la présentation du tableau afin d'insérer correctement la catégorie « 60 » entre 50 % et 75-85 %, conformément à l'harmonisation des publications sur l'adéquation des fonds propres selon Bâle III / Suisse. La correction garantit que les cadres de publication des banques au titre du pilier 3 reflètent l'ensemble du spectre de pondération des risques et que les obligations de publication sont conformes aux références de marge de la circulaire FINMA 20/1 et à l'approche standardisée du risque de crédit. Cet ajustement est de nature technique et n'introduit pas de nouvelles exigences en matière de publication, mais corrige le tableau juridique afin d'éviter toute ambiguïté d'interprétation dans la catégorisation des expositions, en particulier les expositions aux banques multilatérales de développement, aux entreprises et aux banques dans le cadre des modèles de publication pondérés en fonction des risques. Le tableau corrigé doit être utilisé immédiatement, car l'erratum entre en vigueur à la date de publication, soit le 14 octobre 2025. Pour les banques et les sociétés d'investissement réglementées qui utilisent des approches standardisées du risque de crédit, le classement correct des expositions dans les modèles de publication est nécessaire pour garantir l'exactitude et la comparabilité des rapports prudentiels. Cela garantit une transparence totale dans le cadre du pilier 3 et l'alignement sur les modèles internationaux (ABE, CBCB).

UNITED KINGDOM

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

FCA publishes financial crime oversight in corporate finance firms

CACEIS

On the 20 October 2025, the FCA published financial crime oversight in corporate finance firms.

The FCA survey findings on financial crime controls in corporate finance firms, summarises the results of a review into how corporate finance firms manage financial crime risks. The survey covered 303 firms not required to submit financial crime data returns, with 270 responding.

The FCA found that around two-thirds of firms may not fully comply with the Money Laundering Regulations in one or more areas of their anti-financial crime frameworks. Key weaknesses included the absence of documented business-wide risk assessments, missing or incomplete customer due diligence (CDD) records, and inadequate oversight of appointed representatives. With 29% not conducting risk assessments and 19% not evaluating their appointed representatives (ARs)
oversight processes.

The FCA noted that close client relationships, while common in corporate finance, cannot replace formal documentation and ongoing monitoring. Firms must maintain written risk assessments, conduct customer and enhance due diligence, and periodically review relationships to ensure information remains current.

Despite these shortcomings, the survey also identified examples of good practice, including regular financial crime reporting to senior management and the use of structured risk registers and management information.

The FCA expects all firms to review these findings, address identified gaps and strengthen their financial crime control frameworks. It is contacting firms that fall short of expectations to ensure prompt remedial action, using the results to inform future supervision and enforcement.

 

CYBERSECURITY

BoE, PRA, and FCA publish joint paper on effective practices for Cyber Response and Recovery

CACEIS

On the 23 October 2025, the BoE, PRA, and FCA published joint paper on effective practices for Cyber Response and Recovery.

The report, published jointly by the Bank of England (BoE), Prudential Regulation Authority (PRA), and Financial Conduct Authority (FCA), outlines examples of effective practices observed across major UK financial firms and market infrastructures for responding to and recovering from severe cyber incidents.

It builds on the UK regulators’ 2021 Operational Resilience policies and highlights how firms are strengthening their ability to stay within impact tolerances during cyber disruptions. The report focuses on lessons drawn from self-assessments and sector collaboration efforts, particularly within Other Systemically Important Institutions (O-SIIs) and Financial Market Infrastructures (FMIs).

Key observations include that leading firms are simulating increasingly severe and complex cyber-attack scenarios, testing recovery from destructive events and third-party failures. Effective practices include establishing immutable backups, testing bare metal recovery to rebuild systems from clean environments, and prioritising the restoration of critical data and services needed to deliver important business functions. Mature firms also maintain crisis communication plans and alternative communication channels to preserve transparency with regulators, clients, and the public during disruptions.

The paper also stresses the importance of managing third-party risks, ensuring that suppliers’ resilience capabilities meet comparable standards, and having failover or recovery options if key providers are compromised. The Cross Market Operational Resilience Group plays a key role in fostering collective resilience by publishing sector-wide guidance, frameworks for reconnection, and organising exercises such as the 2024 Cyber Stress Test.

 

GOVERNANCE & ORGANISATION

FRC publishes update on guidance to support Stewardship Code reporting

CACEIS

On the 30 October 2025, the FRC published update on guidance to support Stewardship Code reporting.

The update to the UK Stewardship Code 2026 Guidance introduces new and expanded instructions designed to help asset managers, owners, and service providers prepare more effective and transparent stewardship reports ahead of the 2026 Code’s implementation.

The update provides additional examples of good reporting practice for the Policy and Context Disclosure and Activities and Outcomes Report sections, focusing on how organisations can clearly explain their investment beliefs, use of resources, governance arrangements, and risk management processes. It refines how signatories should report on stewardship outcomes, particularly regarding ongoing engagements, use of technology such as AI and data systems, and oversight of external managers.

It further elaborates on Principles 1–6, adding detailed expectations on integrating stewardship with investment processes, identifying systemic risks, exercising voting rights, and escalating engagement activities. The revision also strengthens expectations around conflicts of interest, transparency in voting, and evidence of ESG integration, requiring firms to report on both successful and unsuccessful engagements and to document lessons learned.

 

OTHER - CAPITAL MARKETS

PRA publishes Policy Statement PS16/25 and the FCA PS25/13 on Markets in Financial Instruments Directive Organisational Regulation (MiFID Org Reg)

CACEIS

On the 9 October 2025, the PRA published Policy Statement PS16/25 and the FCA PS25/13 on Markets in Financial Instruments Directive Organisational Regulation (MiFID Org Reg).

The Financial Conduct Authority’s Policy Statement PS25/13 and the Prudential Regulation Authority’s Policy Statement PS16/25 together mark the completion of the United Kingdom’s transition of the Markets in Financial Instruments Directive Organisational Regulation (MiFID Org Reg) into the domestic regulatory framework. This transfer is part of the broader post-Brexit reforms established under the Financial Services and Markets Act 2023, which enable UK regulators to take direct responsibility for retained EU law. Both policy statements ensure that the existing MiFID organisational requirements are maintained under UK law, providing continuity, legal certainty, and a foundation for future reform.

The FCA’s PS25/13 restates the firm-facing requirements of the MiFID Org Reg into the FCA Handbook. These changes affect a wide range of conduct and organisational provisions, including client categorisation, conflicts of interest, order execution, record-keeping, and the safeguarding of client assets. While the policy does not alter the substance of existing obligations, it improves the structure, drafting, and accessibility of the rules. Feedback to the consultations broadly supported this approach, with respondents welcoming the clarity and proportionality of the revisions. The FCA has also confirmed that these updates will support future initiatives, including reforms to client categorisation, retail investment disclosures, and conflicts of interest rules, as part of the regulator’s wider efforts to simplify the conduct regime and align it with the Consumer Duty and Advice Guidance Boundary Review.

In practical terms, the FCA’s new rules redistribute the relevant MiFID Org Reg provisions across key sections of the Handbook. The changes are primarily editorial, focusing on consistency and modernised language. The FCA notes that this process will allow it to take a more flexible, outcomes-based approach to future amendments. In addition, the statement links the MiFID transfer to other upcoming reforms such as the Consumer Composite Investments regime, which will replace the current PRIIPs and UCITS disclosure frameworks, and updates to the definition of Systematic Internalisers. The FCA confirms that there are no material cost implications for firms, as the rules restate existing obligations rather than impose new ones.

The PRA’s PS16/25 complements the FCA’s work by transferring into the PRA Rulebook the organisational requirements of the MiFID Org Reg that apply to PRA regulated firms such as banks, building societies, and designated investment firms. These include provisions on outsourcing, internal audit, compliance, risk management, and record-keeping. The PRA’s approach mirrors that of the FCA in ensuring continuity without policy divergence. Consultation feedback supported the objective of simplifying the rulebook while retaining key requirements. The PRA has refined the drafting to ensure the language aligns with the UK regulatory framework, notably by replacing the EU term “supervisory function” with the UK term “governing body” to reflect existing corporate governance structures.

The PRA’s policy statement also confirms the inclusion of a destination table mapping each MiFID Org Reg article to its new location within the Rulebook, ensuring transparency for firms transitioning to the new structure. The PRA highlights that the rules continue to support its primary objective of promoting the safety and soundness of firms and its secondary objective of facilitating competition. The policy aligns with the government’s Smarter Regulatory Framework initiative and the regulators’ broader aim of ensuring that UK financial regulation remains coherent, proportionate, and internationally competitive.

The rules entered into force on the 23 October 2025.

 

OTHER - DIGITAL

BoE publishes its approach to innovation in artificial intelligence, distributed ledger technology, and quantum computing

CACEIS

On the 15 October 2025, the BoE published its approach to innovation in artificial intelligence, distributed ledger technology, and quantum computing.

The Bank of England (BoE) outlines in this publication its comprehensive framework for supporting responsible innovation in artificial intelligence (AI), distributed ledger technology (DLT), and quantum computing, recognising these as transformative technologies for the future of the UK financial system. The approach seeks to harness technological progress to enhance financial stability, operational resilience, and market efficiency, while ensuring that emerging risks are identified and mitigated through proportionate oversight.

The Bank emphasises a technology-agnostic regulatory stance, encouraging innovation without favouring specific solutions, so that firms can adopt new technologies safely and competitively. It commits to collaborating with financial institutions, technology providers, and regulators to ensure that innovation aligns with its statutory objectives for monetary stability, financial stability, and the safety and soundness of financial market infrastructure.

For artificial intelligence, the BoE focuses on ensuring that the use of AI in risk management, credit assessment, and operational decision-making is explainable, fair, and resilient. It highlights its ongoing participation in the AI Public-Private Forum and its coordination with the FCA and Centre for Data Ethics and Innovation on the safe deployment of AI systems across regulated financial firms.

On distributed ledger technology (DLT), the Bank recognises its potential to improve transparency and efficiency in settlement, securities issuance, and collateral management. The publication references initiatives such as the Digital Securities Sandbox (DSS) and Project Meridian, which explore DLT’s application in wholesale payment and securities settlement systems. It also links this work to the development of the renewed Real-Time Gross Settlement (RTGS) system, designed to accommodate interoperable DLT-based infrastructures.

In relation to quantum computing, the Bank underlines both opportunities and risks. It notes that while quantum technologies could strengthen computational capacity and risk modelling, they may also pose threats to cryptographic security. The Bank is therefore investing in quantum-resilient research and collaborating with the National Quantum Computing Centre and National Cyber Security Centre (NCSC) to assess future cryptographic standards.

 

OTHER - OTHER

FCA publishes consultation CP25/29 on changes to the UK Short Selling Regime

CACEIS

BACKGROUND

On the 28 October 2025, the FCA published consultation CP25/29 on changes to the UK Short Selling Regime (UK SSR).

The UK SSR was incorporated into UK law through the European Union (Withdrawal) Act 2018 and forms the foundation of the UK short selling regime. It sets requirements for short selling of financial instruments traded on UK venues, including shares, UK sovereign debt, and UK sovereign credit default swaps (CDS).

The Financial Services and Markets Act 2023 (FSMA 2023) provides the legal framework to repeal and replace assimilated law. Under this framework, the Treasury has created new legislation for short selling, giving the FCA powers to issue firm-facing rules while broadly retaining current emergency powers.

This consultation paper outlines proposed rules and guidance for short selling, along with a draft Statement of Policy on emergency powers and the draft legal instrument.

WHAT'S NEW?

The FCA proposes several updates to make the short selling regime clearer and more efficient:

  • Position reporting: deadlines for notifying net short positions (NSPs) extended to 23:59 T+1; guidance added on calculating NSPs and reporting within groups.
  • Covering: records of appropriate arrangements must be kept for at least five years.
  • Reportable Shares List (RSL): criteria revised to reduce the number of shares on the list; update date moved to 1 April to align with the EU list.
  • Market maker exemptions: notification process simplified, timing and content updated to support faster use of exemptions.
  • Public disclosure: new guidance on calculation, publication, updating, and correction of aggregate net short positions (ANSPs).
  • FCA Handbook updates: glossary updated, and consequential changes to FINMAR, SUP, DEPP, and ENFG.
  • Waiver provisions: allow firms to request exemptions from position reporting in exceptional circumstances.
  • Operational updates: improvements to systems for receiving reports and notifications to enhance efficiency and data quality.
  • Emergency powers: current approach maintained with high thresholds for use.

WHAT'S NEXT?

Implementation will occur in two phases: Phase 1 updates systems for ANSP calculation and RSL publication on the main commencement day; Phase 2 updates reporting systems six months later.

A Policy Statement, including the legal instrument and draft RSL, will be published two months before the main commencement day.

Transitional provisions allow positions reported under the current regime to count toward ANSP calculations and enable continued use of market maker exemptions.

Consultation runs for seven weeks, closing on 16 December 2025. An event will be held on 6 November 2025 to discuss operational changes.

 

REMUNERATION

PRA publishes joint Policy PS21/25 on remuneration reform with FCA (PS25/15)

CACEIS

On the 15 October 2025, the PRA published joint Policy PS21/25 on remuneration reform with FCA (PS25/15).

Joint Policy Statement from the PRA and FCA finalises reforms to the UK remuneration regime for banks and PRA designated investment firms. It follows Consultation Paper CP16/24 and aims to simplify and modernise remuneration rules, align pay structures with prudent risk management, and enhance UK competitiveness. The reforms seek to ensure that staff incentives support firms’ long-term safety, soundness, and accountability while making implementation more proportionate and internationally consistent.

The key changes include reducing the minimum deferral period for all Material Risk Takers, including Senior Management Functions, to four years, replacing the previous five and seven-year requirements. Firms can now allow deferred awards to vest gradually from the date of grant, pay interest or dividends on deferred remuneration, and are no longer expected to apply retention periods to deferred instruments. A marginal deferral system has been introduced in order to aligning with global practice.

The reforms also simplify Material Risk Takers (MRT) identification, removing quantitative thresholds and prior regulatory approvals for exclusions. Firms must instead ensure effective governance oversight of the process through remuneration and risk committees. A new proportionality threshold exempts MRTs earning less than £660,000, from certain deferral and instrument requirements, and reinstates a three-month exemption for short-term MRTs.

The policy further strengthens accountability links between pay and performance, requiring firms to consider remuneration adjustments for senior managers up the chain following adverse outcomes, and to ensure supervisory priorities are reflected in remuneration governance. These measures reinforce the Senior Managers and Certification Regime while allowing flexibility in applying performance and risk adjustments.

Data and reporting processes remain largely unchanged, though the regulators plan future consultations to simplify remuneration policy statement tables. The FCA has aligned SYSC 19D with the PRA’s Remuneration Rules, removing duplication and ensuring a single, consistent framework for dual-regulated firms.

It entered into force on 16 October 2025.

 

SETTLEMENT

FCA publishes letter outlining expectations for UK move to T+1 securities settlement

CACEIS

On the 23 October 2025, the FCA published letter outlining expectations for UK move to T+1 securities settlement.

The FCA’s letter outlines its expectations for asset management and alternative investment firms ahead of the UK’s transition to a T+1 securities settlement cycle on 11 October 2027.

The move to T+1, coordinated by the Accelerated Settlement Task Force (AST), aims to improve market efficiency, liquidity, and competitiveness. The FCA emphasises that while the transition is industry-led, it expects firms to prepare proactively and ensure readiness well before the deadline.

The FCA sets out clear milestones that by end-2025, firms must be familiar with the AST Implementation Plan and have a T+1 project plan with funding and governance in place, that by end-2026, firms should have implemented required operational and system changes, including automation of manual processes, updates to trading, clearing, and settlement workflows, and engagement with settlement agents and outsourced providers. Firms that lend securities must also ensure they can recall positions in time to meet T+1 deadlines. Testing of amended processes must take place throughout 2027 to ensure full readiness by 11 October 2027.

The FCA encourages firms to use resources such as the AST Implementation Plan, industry association guidance, and the FCA’s T+1 webpage. It also supports the industry recommendation for fund settlement cycles to move to T+2, ensuring cash management flexibility while aligning with T+1 market settlement.

The letter concludes by confirming the FCA will monitor firms’ progress and may request updates on implementation plans as part of its supervisory work to ensure a smooth and timely transition to T+1 settlement across the UK market.

 

FCA publishes statement urging firms to act now on T+1 settlement

CACEIS

On the 10 October 2025, the FCA published statement urging firms to act now on T+1 settlement.

The publication outlines the UK’s planned transition to a T+1 settlement cycle, under which most financial trades will settle one business day after execution beginning in 2027. This change is intended to enhance market efficiency, reduce counterparty and operational risk, and align the UK with international settlement practices.

It emphasises the need for firms to begin preparations well in advance of the 2026 implementation milestones set out by the Accelerated Settlement Taskforce. Firms are urged to focus on improving inventory management, reviewing settlement processes, increasing automation, engaging with clients and counterparties, and avoiding complacency by assuming the UK’s transition will follow the same path as other jurisdictions.

The publication notes that while some market participants have already begun preparations, significant challenges remain in areas such as cross-border settlement, securities lending, foreign exchange transactions, and the use of the CREST settlement system. Firms are encouraged to undertake impact assessments, allocate resources to automation, and collaborate closely with infrastructure providers and clients to ensure readiness.

The overarching message is that firms must act now to adapt systems, operations, and workflows ahead of the UK’s move to T+1 settlement to preserve market efficiency and resilience.

 

SUPERVISION

FCA publishes its multi-firm review of consolidation in the financial advice and wealth management sector on 31 October 2025

CACEIS

On the 31 October 2025, the FCA published its multi-firm review of consolidation in the financial advice and wealth management sector.

The review examines the growing trend of mergers and acquisitions among financial advice and wealth management firms, assessing both the benefits and risks of consolidation. It aims to promote sustainable growth by identifying good practices and areas where improvement is needed, reminding firms of the FCA’s existing expectations rather than setting new ones.

The FCA found that consolidation can deliver efficiencies, stronger governance, and better client outcomes when managed well. However, rapid expansion without appropriate controls can result in poor client service, financial instability, or disorderly business failure. The review covered debt structures, organisational frameworks, prudential consolidation, group risk management, governance, acquisition and integration processes, and conflict of interest management.

Key good practices identified include clear group structures, effective risk oversight, prudent use of debt, and strong governance supported by adequate resources and independent board challenge. Firms that monitored group-wide risks, ensured regulated entities remained resilient despite group-level debt, and conducted rigorous due diligence before acquisitions were found to be better positioned for sustainable growth.

Conversely, the FCA highlighted risks from groups not applying prudential consolidation, using short-term or highly leveraged debt, or upstreaming cash from regulated firms to holding companies. Weaknesses in governance, insufficient systems and controls, inadequate leadership capacity, and unmanaged conflicts of interest were also noted as threats to clients and market integrity.

The FCA emphasised that firms pursuing acquisitions should ensure that compliance, governance, and risk management frameworks expand in line with business growth, and that all potential conflicts are effectively identified and mitigated. Firms are encouraged to compare their own arrangements against these findings and make any necessary improvements to support resilient, well-managed, and client-focused consolidation.

INTERNATIONAL

ANTI-MONEY LAUNDERING / COMBATING TERRORISM FINANCING / COMBATTING PROLIFERATION FINANCING (AML/CFT/CPF)

FATF updates its Consolidated assessment ratings (03/10/2025)

CACEIS

On 3 October 2025, the FATF updated its Consolidated assessment ratings.

Through its nine FATF-Style Regional Bodies (FSRBs), the FATF brings together a global network of 205 jurisdictions that have each committed at the highest political level, to implementing the FATF Recommendations.

FATF and FSRBs conduct peer reviews on an ongoing basis to assess how effectively their respective members' AML/CFT measures work in practice, and how well they have implemented the technical requirements of the FATF Recommendations.

This table provides an up-to-date overview of the ratings that assessed countries obtained for effectiveness and technical compliance (last updated on 3 October 2025).

 

FATF updates its Consolidated assessment ratings (17/10/2025)

CACEIS

On 17 October 2025, the FATF updated its Consolidated assessment ratings.

Through its nine FATF-Style Regional Bodies (FSRBs), the FATF brings together a global network of 205 jurisdictions that have each committed at the highest political level, to implementing the FATF Recommendations.

FATF and FSRBs conduct peer reviews on an ongoing basis to assess how effectively their respective members' AML/CFT measures work in practice, and how well they have implemented the technical requirements of the FATF Recommendations.

This table provides an up-to-date overview of the ratings that assessed countries obtained for effectiveness and technical compliance.

CONTACTS

This publication is produced by the Projects & Regulatory Monitoring teams as well as experts from the Legal Department and the Compliance Department of CACEIS entities, together with the close support of the Communications Department.

Editor
Gaëlle Kerboeuf, Group Regulatory Watch Senior Expert

Permanent Editorial Committee
Gaëlle Kerboeuf, Group Regulatory Watch Senior Expert
Jeanne Laurent - Head of Unit - Business Compliance
Corinne Brand, Group Content Manager

Local
François Honnay, Head of Legal (Belgium)
Fanny Thomas, Head of Legal Client Contracts (France)
Aude Levant, Group Compliance
Jeanne Laurent, Head of Unit - Business Compliance
Stefan Ullrich, Head of Legal (Germany)
Costanza Bucci, Head of Legal & Compliance (Italy)
Luciana Vertulli, Compliance Officer (Italy)
Fernand Costinha, Head of Legal (Luxembourg)
Julien Fetick, Senior Financial Lawyer (Luxembourg)
Gérald Stadelmann, Head of Legal (Luxcellence Luxembourg)
Alessandra Cremonesi, Head of Legal (Switzerland)
Puck Kranénburg (The Netherlands)
Robin Donagh, Head of Legal (Ireland)
Olga Kitenge, Legal, Risk & Compliance (UK)
Katherine Petcher, Group Head, Legal (Common Law Countries)
Beatriz Sanchez Jete, Compliance (Spain)
Jessica Silva, Compliance (Brazil)
Luiz Fernando Silva, Compliance (Brazil)
Libia Andrea Carvajal, Compliance (Colombia)
Daiana Garcia, Compliance (Colombia)
Karim Martínez, Compliance (Mexico)
Edgar Zugasti, Compliance (Mexico)

Design
CACEIS Group Communications

Photos credit
CACEIS, Adobe Stock

CACEIS
89-91 rue Gabriel Péri
92120 Montrouge

Information importante – Une usurpation de l'identité de CACEIS est en cours avec une offre frauduleuse portant sur des placements ou des investissements. CACEIS n'est pas à l'origine de cette offre et vous appelle à la vigilance afin d'éviter d’être la cible de ce type de fraude. Vous pouvez consulter les listes noires ainsi que les alertes des autorités sur le site ABEIS.
x