October 2026
CONTENT
EUROPEAN UNION
CAPITAL MARKETS
Council of the EU publishes General Approach on the Market Integration and Supervision Package (MISP)
![]()
On 30 October 2026, the Council of the European Union published an 'A' Item Note on the Market Integration and Supervision Package (MISP), which sets out the Council's agreed general approach on three legislative proposals aimed at further developing capital market integration and supervision within the European Union.
Key Requirements:
The package comprises:
- A proposed Regulation on settlement finality, repealing Directive 98/26/EC and amending Directive 2002/47/EC on financial collateral arrangements.
- A proposed Directive amending Directives 2009/65/EC (UCITS), 2011/61/EU (AIFMD) and 2014/65/EU (MiFID II) regarding the further development of capital market integration and supervision within the Union.
- A proposed Regulation amending multiple EU financial services regulations relating to capital market integration and supervision.
- The Council Working Party discussed the proposals extensively throughout 2025 and 2026 and agreed the texts forming the Council's general approach.
Next Steps / Timeline:
- The Council is invited to adopt the general approach at the Economic and Financial Affairs Council meeting on 9 November 2026. Following this, the Presidency intends to begin interinstitutional negotiations once the European Parliament finalises its negotiating position. Parliamentary negotiations remain ongoing.
The next stage is the commencement of interinstitutional negotiations between the Council and the European Parliament after the Parliament establishes its negotiating mandate.
Council of the EU publishes its General Approach on the Market Integration and Supervision Package (MISP)
![]()
BACKGROUND
On 5 October 2026, the Council of the European Union published a Presidency note on the Market Integration and Supervision Package (MISP), presenting a compromise text for a general approach. The package comprises a proposed Regulation on settlement finality repealing Directive 98/26/EC and amending Directive 2002/47/EC, a proposed Directive amending Directives 2009/65/EC, 2011/61/EU and 2014/65/EU, and a proposed Regulation amending a broad set of Union financial services acts as regards the further development of capital market integration and supervision within the Union. The package forms part of the EU’s Savings and Investments Union agenda and is intended to deepen capital market integration, reduce fragmentation and strengthen supervisory consistency. It affects a wide range of market participants, including trading venues, central counterparties, central securities depositories, asset managers, crypto-asset service providers and supervisors, notably ESMA and national competent authorities.
WHAT'S NEW?
Trading:
The compromise introduces the concepts of Pan-European Market Operators and Significant Trading Venues, both subject to direct ESMA supervision. It also expands the consolidated tape for shares and ETFs after the first five-year period, including three levels of order-book data, venue attribution, systematic internaliser data, and a mechanism for alternative closing prices. Additional market-structure changes cover frequent batch auctions, tick sizes, post-trade transparency and quoting obligations.
Post-trading and settlement finality:
The package provides for direct ESMA supervision of significant CCPs and significant CSDs. It also supports cross-border interoperability and service provision in clearing and settlement. On settlement finality, the proposed move from a directive to a regulation is intended to strengthen the single rulebook, reduce fragmentation, and increase legal certainty, including through provisions on registration, designation, re-registration and re-designation of systems and on insolvency protection.
Asset management:
The compromise includes measures to facilitate the use of staff, systems and expertise across EU asset-management groups, harmonise authorisation information requirements, strengthen supervisory coordination through colleges for large groups, improve the management and marketing passport, and allow Member States to permit the appointment of eligible depositaries in other Member States, subject to safeguards.
DLT Pilot Regime:
The compromise revises the DLT Pilot Regime by increasing thresholds, broadening eligible instruments and participants, enabling additional DLT activities, and introducing a simplified regime and unbundled services. It also removes the possibility for Member States to set different thresholds at national, project or group level.
ESMA supervision and governance:
The package provides for a significant transfer of supervisory responsibility to ESMA, including direct supervision of significant trading venues, significant CCPs, significant CSDs, significant CASPs and PEMOs. It also establishes a new independent Executive Board within ESMA for operational management and entity-specific supervisory decisions, while the Board of Supervisors remains responsible for regulatory decisions, strategy, budget and supervisory convergence.
Political issues identified by the Presidency:
The note states that two issues require political decision before the package can be agreed: ESMA funding and national contributions, and the definition of Significant Trading Venues. Two options are presented for ESMA funding, including retention of the current contribution key or a Commission review and possible legislative proposal for a new allocation key. For Significant Trading Venues, the compromise sets out market-share and cross-border criteria and includes a review clause for the Commission two years after application.
WHAT'S NEXT?
The Presidency note states that political agreement on ESMA funding and on the definition of Significant Trading Venues is required before the overall package can be agreed. The Presidency asks ministers whether they agree with the compromise text, including the removal of square brackets, and whether they give political support to the overall package. The note also refers to an interinstitutional commitment to reach agreement on MISP by the end of 2026.
EC publishes Delegated Regulation amending RTS 7 on organisational requirements of trading venues and circuit breakers
![]()
On 1 October 2026, the European Commission (EC) published a Commission Delegated Regulation amending Delegated Regulation (EU) 2017/584 (RTS 7), which updates the organisational requirements applicable to trading venues and introduces more detailed requirements concerning circuit breakers.
The Regulation applies to trading venues where order submission and order matching is facilitated by electronic means. Trading systems operating exclusively through voice negotiation fall outside its scope. It has EEA relevance and amends the RTS supplementing MiFID II.
Key Requirements:
- Clarifies the scope of RTS 7 and aligns it with amendments introduced through DORA-related legislative changes, including the removal of certain ICT-related requirements from RTS 7.
- Revises outsourcing provisions by requiring trading venues to notify competent authorities before outsourcing certain operational functions, including critical operational functions.
- Establishes common principles for the design, calibration, testing, monitoring and governance of circuit breakers, including trading halts and price collars.
- Requires trading venues to publish information on the functioning and effects of circuit breakers and to report annually to competent authorities on the parameters underpinning those mechanisms using a prescribed template.
The Regulation will enter into force on the third day following its publication in the Official Journal of the European Union.
ESMA publishes Final Report on draft RTS amending CCP collateral guarantees and investment policy
![]()
On 19 October 2026, the European Securities and Markets Authority (ESMA) published the Final Report on draft RTS amending Commission Delegated Regulation (EU) No 153/2013 in relation to public guarantees, public bank guarantees and commercial bank guarantees as collateral and in relation to certain aspects of investment policy and highly secure arrangements for the deposit of financial instruments, which sets out final draft regulatory technical standards implementing amendments introduced by EMIR 3 and targeted updates to CCP investment policy requirements.
Key Takeaways:
- ESMA proposes detailed conditions under which CCPs may accept public guarantees, public bank guarantees and commercial bank guarantees as eligible collateral, including concentration limits, credit quality and wrong-way risk requirements, enforceability standards, and arrangements for guarantees posted by non-financial clients.
- The draft RTS clarifies that CCPs may accept fully uncollateralised commercial and public bank guarantees, subject to risk management safeguards, and introduces requirements for client identification, attribution, notification mechanisms and beneficiary arrangements when guarantees are used by non-financial clients.
- ESMA also proposes targeted amendments to CCP investment rules by permitting debt instruments issued or guaranteed by the EU, BIS and IMF as eligible investment instruments and by recognising the Union Registry as a highly secure arrangement for holding emission allowances accepted as collateral.
Next Steps / Timeline
ESMA will submit the Final Report and draft RTS to the European Commission. The Commission has three months to decide whether to adopt the RTS as a Delegated Regulation. Following adoption, the RTS will be subject to scrutiny by the European Parliament and the Council.
ESMA publishes Final Report on MAR Guidelines on delay in the disclosure of inside information
![]()
On 16 October 2026, the European Securities and Markets Authority (ESMA) published its Final Report on MAR Guidelines on delay in the disclosure of inside information, revising the existing MAR Guidelines to align them with the disclosure regime introduced by the Listing Act and the related delegated regulation on protracted processes.
Key Takeaways:
- Intermediate steps in protracted processes no longer subject to disclosure: ESMA updates the Guidelines to reflect the Listing Act rule that, in a protracted process, only the final event or final circumstance must be disclosed, while intermediate steps are no longer subject to disclosure or to the delayed disclosure mechanism. As a result, several existing examples of legitimate interests for delaying disclosure have been removed.
- New examples of legitimate interests added: ESMA introduces additional examples of legitimate interests that may justify delayed disclosure, including:
- Compliance with confidentiality orders issued by public authorities; the need to collect further information about exceptional events, including major incidents or cyber-attacks; the protection of sensitive commercial information where disclosure could jeopardise a concrete business opportunity; appointments of key managers before the termination of their current employment; and certain group-related situations where disclosure by one entity could undermine a valid delay by another group entity.
- Removal of the “misleading the public” section: the Guidelines delete the section on circumstances where delayed disclosure is likely to mislead the public, reflecting the Listing Act amendments, which replaced that condition with the requirement that delayed disclosure must not concern inside information that is in contrast with the issuer’s latest public announcement or other communication on the same matter.
The Guidelines will apply from the date of their publication on ESMA’s website in all official EU languages. Competent authorities must notify ESMA of their compliance status within two months of publication.
ESMA publishes Final Report on Regulatory Technical Standards for Post-Trade Risk Reduction (PTRR) Services under the EMIR clearing obligation exemption
![]()
On 20 October 2026, the European Securities and Markets Authority (ESMA) published the Final Report on Regulatory Standards on the requirements for Post-Trade Risk Reduction services for the purpose of the clearing obligation exemption under EMIR, which sets out ESMA’s final draft Regulatory Technical Standards (RTS) specifying the conditions under which transactions resulting from PTRR services may benefit from the EMIR clearing obligation exemption.
Key Takeaways:
- The draft RTS specifies the conditions for eligible PTRR services, including portfolio compression, portfolio rebalancing and basis risk optimisation, and clarifies requirements on market risk neutrality, risk reduction and safeguards against circumvention of the clearing obligation.
- The RTS introduce operational requirements for PTRR service providers covering governance, conflicts of interest, algorithm design and testing, transparency, participant onboarding, record-keeping, monitoring and compliance controls. Providers must ensure exercises remain market risk neutral, reduce overall risk in submitted portfolios and do not increase aggregate net uncleared risk.
- The RTS establish supervisory monitoring requirements, including annual compliance confirmations and reporting to competent authorities, notification of material changes and retention of PTRR records for at least ten years. The report also provides recommendations regarding MiFIR record-keeping obligations for PTRR-related exemptions from transparency, trading obligation and best execution requirements.
Next Steps / Timeline
ESMA submitted the Final Report and draft RTS to the European Commission on 9 October 2026. Under Article 10 of the ESMA Regulation, the Commission has three months to decide whether to endorse the proposed RTS.
ESMA publishes Methodology for assessing the Effectiveness of the Active Account Requirement
![]()
On 19 October 2026, the European Securities and Markets Authority (ESMA) published Methodology for assessing the Effectiveness of the Active Account Requirement, which establishes the analytical framework ESMA will use to assess whether the Active Account Requirement (AAR) under EMIR 3 is effectively reducing EU financial stability risks arising from excessive reliance on systemically important third-country central counterparties (Tier 2 CCPs).
Key Takeaways:
- ESMA sets out a structured assessment framework covering three elements:
(i) implementation status of the AAR,
(ii) effectiveness of the AAR in mitigating EU financial stability risks, and
(iii) assessment of potential complementary measures, including quantitative thresholds.
- The methodology assesses risks linked to the financial or operational failure of Tier 2 CCPs, discretionary decisions by Tier 2 CCPs or third-country authorities, and the EU’s structural reliance on third-country clearing services. ESMA will use quantitative indicators, qualitative evidence and supervisory judgement to evaluate the AAR’s effectiveness.
- The assessment will be based on AAR reporting, EMIR transaction reporting, AAR notifications, supervisory information and, where necessary, additional targeted data requests. The findings may inform recommendations and potential complementary measures to strengthen the objectives of EMIR 3.
The next step is for ESMA to launch additional data collection and stakeholder engagement activities, with a final assessment report planned for submission to the European Parliament, Council and Commission in 2027.
ESMA publishes statement on the extended transitional period for third-country CSDs
![]()
On 7 October 2026, the European Securities and Markets Authority (ESMA) published a Public Statement on the extended transitional period for third-country central securities depositories (CSDs).
- The purpose of the statement is to clarify ESMA’s supervisory expectations regarding the continued provision of certain services by third-country CSDs pending the adoption of EU legislation extending the current transitional regime. It is also intended to provide greater legal and operational certainty to market participants, particularly issuers, who may otherwise face disruption if access to those services were to end on 17 January 2027.
Key takeaways:
- Under the current EU framework, third-country CSDs may provide notary services to issuers and central maintenance services to participants in relation to financial instruments constituted under the law of an EU Member State, subject to a specific recognition regime. Third-country CSDs already providing these services may continue to do so during a transitional period until a recognition decision is taken, or until 17 January 2027, whichever occurs earlier.
- ESMA notes that the Market Integration and Supervision Package (MISP) proposes to extend this transitional period by three years after its entry into force. ESMA also indicates that, based on its understanding, both the Council of the EU and the European Parliament support such an extension.
- The statement further explains that neither ESMA nor national competent authorities (NCAs) has the legal power to suspend or disapply directly applicable EU law. Any formal change to the applicable rules must therefore be made through EU legislation. However, in light of the proposed extension under the MISP and the emerging agreement between the EU co-legislators, ESMA states that it expects NCAs not to prioritise supervisory and enforcement actions in relation to third-country CSDs that are not recognised by ESMA until the proposed extended transitional period takes effect.
In practical terms, the statement is meant to ease market concerns, support forward planning, and signal a pragmatic supervisory approach while the EU legislative process is ongoing.
The next step is the completion of the EU legislative process relating to the proposed extension of the transitional regime for third-country CSDs under the MISP.
EU OJ publishes EC Delegated Regulation (EU) 2026/1763 amending MiFIR transparency RTS for derivatives, package orders and OTC derivatives consolidated tape requirements
![]()
On 23 October 2026, the Official Journal of the European Union (OJ) published Commission Delegated Regulation (EU) 2026/1763, which amends the regulatory technical standards under MiFIR relating to transparency requirements for derivatives, package orders and consolidated tape data for OTC derivatives, and corrects certain provisions of Delegated Regulation (EU) 2017/587.
The Regulation applies to trading venues, investment firms, APAs and consolidated tape providers subject to Regulation (EU) No 600/2014 (MiFIR). It amends Delegated Regulations (EU) 2017/583, (EU) 2017/2194 and (EU) 2025/1155 and corrects Delegated Regulation (EU) 2017/587. The Regulation is directly applicable across EU Member States.
Key Requirements:
- Introduces revised pre-trade and post-trade transparency frameworks for exchange-traded and certain OTC derivatives, including static liquidity determinations, large-in-scale thresholds and deferred publication thresholds.
- Updates rules for package orders by requiring that all components be subject to pre-trade transparency requirements before the package order itself is subject to such requirements.
- Establishes input and output data requirements for the OTC derivatives consolidated tape and removes exchange-traded commodities (ETCs) and exchange-traded notes (ETNs) from bond consolidated tape reporting.
Corrects Delegated Regulation (EU) 2017/587 by restoring the obligation for investment firms to take reasonable steps to ensure publication as a single transaction.
Next Steps / Timeline
The Regulation enters into force on the twentieth day following its publication in the Official Journal of the European Union. Articles 1, 2 and 3(1)-(5) apply from 1 March 2027.
EU OJ publishes the EC amendments to CSDR settlement discipline RTS
![]()
BACKGROUND
On 14 October 2026, the European Commission published Commission Delegated Regulation (EU) 2026/1536, adopted on 6 July 2026, amending the regulatory technical standards in Delegated Regulation (EU) 2018/1229 supplementing Regulation (EU) No 909/2014 (CSDR) on settlement discipline. The amendments are linked to Regulation (EU) 2025/2075, which shortened the standard settlement cycle in the Union from T+2 to T+1. The objective of the delegated regulation is to adjust the settlement discipline framework to the shorter settlement cycle, improve settlement efficiency, support greater use of straight-through processing (STP), and refine monitoring and reporting of settlement fails. The measures are relevant to central securities depositories (CSDs), their participants, investment firms, professional and retail clients, and other market participants involved in securities settlement.
WHAT'S NEW?
T+1-related pre-settlement changes:
The Regulation updates the settlement discipline RTS to support the move to a T+1 settlement cycle. Professional clients must send written allocations and confirmations in a standardised electronic and machine-readable format and by 23:00 CET on trade date. Retail clients must also provide relevant settlement information by 23:00 CET on trade date, unless they hold the instruments and cash with the same investment firm.
New data and instruction requirements:
Written allocations and settlement instructions are expanded to include additional data fields, including the settlement cash amount, the identifiers of the delivering and receiving participants, the place of settlement (PSET), and the place of trading. Buy-sell back and sell-buy back transactions are also expressly included in the relevant transaction categories.
CSD settlement efficiency measures:
CSDs must support further settlement efficiency measures, including automatic partial settlement unless a participant opts out, and must offer real-time gross settlement, at least three settlement batches per business day, or both. They must also facilitate access to intra-day cash credit secured with collateral through automated collateralisation functionality, unless directly providing such credit under a banking licence.
Enhanced settlement fail monitoring and reporting:
The Regulation strengthens the monitoring of settlement fails. CSDs must collect more granular information on fail reasons and remedial measures, report more detailed monthly data to authorities, and identify top failing participants by volume and value. The previous annual settlement fail report is removed and reporting templates are updated accordingly.
WHAT'S NEXT?
The Regulation entered into force on the twentieth day following its publication in the Official Journal. It applies from 7 December 2026. However, the amendments relating to the place-of-trading field, settlement fail reporting, deletion of Annex II, and amendments to Annexes I and III apply from 1 July 2027. The amendments relating to participant submission of settlement instructions by 23:59 CET, auto partial settlement, settlement batches, automated collateralisation, removal of the Article 12 derogation, and revised partial settlement rules apply from 11 October 2027.
DIGITAL
EC publishes a consultation on draft Implementing Regulation on practical and specific arrangements for proceedings under Articles 75c and 75d of the AI Act
![]()
On 12 October 2026, the European Commission published a draft Implementing Regulation setting out practical and specific arrangements for certain proceedings conducted by the Commission pursuant to Articles 75c and 75d of Regulation (EU) 2024/1689 (AI Act). The draft lays down procedural rules on access to the Commission’s file, protection of confidential information, and limitation periods for penalties in Commission enforcement proceedings concerning certain AI systems.
The draft Implementing Regulation applies in the context of proceedings conducted by the Commission under the AI Act, including proceedings relating to AI systems subject to direct Commission supervision under Article 75(1). It further specifies procedural arrangements for enforcement proceedings and penalties under Articles 75c and 75d of Regulation (EU) 2024/1689.
Key requirements:
- It establishes practical arrangements for access to the Commission’s file, including negotiated disclosure mechanisms, while safeguarding business secrets and other confidential information.
It specifies procedures for identifying and protecting confidential information during investigations and enforcement proceedings.
- It defines limitation periods for the imposition and enforcement of fines and periodic penalty payments, including circumstances in which those periods may be interrupted or suspended.
- The draft act is open for public feedback from 12 October 2026 to 9 November 2026. The Commission currently plans to adopt the Implementing Regulation in the fourth quarter of 2026. Once adopted, it will enter into force on the twentieth day following its publication in the Official Journal of the European Union.
The next step is the completion of the public feedback period, after which the Commission will finalise the text and may adopt the Implementing Regulation in Q4 2026.
EC publishes Commission Implementing Decision (EU) 2026/2274 on the harmonised standard for high-risk AI systems
![]()
On 14 October 2026, the European Commission (EC) published Commission Implementing Decision (EU) 2026/2274 on the harmonised standard for high-risk AI systems drafted in support of Regulation (EU) 2024/1689 (AI Act), which publishes the reference of EN 18286:2026 – Artificial intelligence – Quality management system for EU AI Act regulatory purposes in the Official Journal of the European Union, enabling its use to demonstrate conformity with relevant requirements under the AI Act.
The Decision is relevant to providers and other stakeholders that rely on harmonised standards to demonstrate compliance with requirements under Regulation (EU) 2024/1689 (AI Act). The published standard relates specifically to quality management systems for AI Act regulatory purposes and supports compliance activities for high-risk AI systems within the EU framework.
Key Takeaways:
- The Commission assessed EN 18286:2026, developed by CEN and CENELEC, and concluded that it satisfies the requirements it is intended to cover under the AI Act. As a result, the standard's reference has been published in the Official Journal.
- The publication of the harmonised standard provides organisations with a recognised compliance tool for establishing and maintaining quality management systems aligned with the AI Act's regulatory framework. Use of the standard may support a structured approach to demonstrating conformity with applicable requirements.
- In accordance with the EU harmonisation framework, compliance with a harmonised standard whose reference has been published in the Official Journal confers a presumption of conformity with the corresponding requirements covered by that standard. This may facilitate conformity assessment and regulatory compliance for affected organisations.
The Decision entered into force on the date of its publication in the Official Journal of the European Union, making the harmonised standard immediately available for use by entities seeking to demonstrate compliance with relevant AI Act requirements.
ESMA publishes Call for Evidence on the use of tokenised collateral in central clearing
![]()
On 9 October 2026, the European Securities and Markets Authority (ESMA) published a press release announcing a Call for Evidence on the potential use of tokenised collateral by central counterparties (CCPs), which seeks stakeholder input on whether, and under what conditions, tokenised forms of collateral could be used safely and effectively in EU central clearing.
Key Takeaways:
- ESMA is seeking evidence on the use of tokenised collateral by CCPs and on how tokenisation may affect the transfer, management, protection and use of collateral throughout its lifecycle.
- The Call for Evidence examines different tokenisation models, including tokenised representations of traditionally held assets ("digital twins"), assets issued directly on distributed ledger technology (DLT), and hybrid arrangements, as well as their interaction with tokenised cash and settlement assets.
- ESMA is requesting feedback on operational, legal and risk considerations, including collateral access, transferability, liquidity conversion following a clearing member default, client protection, segregation, settlement finality, and potential changes to the risk profile of eligible collateral due to tokenisation.
Stakeholders may submit responses until 15 January 2027. ESMA plans to assess the feedback during the first quarter of 2027 and will then determine whether regulatory or supervisory convergence actions are appropriate.
FINANCIAL CRIME
AMLA publishes AML/CFT priorities for the review of MiCA
![]()
On 7 October 2026, the Anti-Money Laundering Authority (AMLA) published its response to the European Commission's targeted consultation on the review of the Markets in Crypto-Assets Regulation (MiCA), which identifies AML/CFT-related priorities and areas where targeted amendments or clarifications could strengthen the management of money laundering and terrorist financing risks and support consistent supervision across the EU.
Key Takeaways:
- Staking, lending and borrowing: AMLA suggests that the European Commission consider bringing these activities within the regulatory framework, reflecting their specific ML/TF risks.
- DeFi arrangements and stablecoins: AMLA proposes consideration of a clear legal definition for DeFi arrangements and common criteria for identifying effective control, while also encouraging a consistent EU-wide approach to unauthorised stablecoins to reduce legal uncertainty.
- AML/CFT scope and supervision: AMLA suggests reviewing whether certain asset-referenced token issuers should be subject to AML/CFT obligations and identifies scope for clearer information requirements to support effective cross-border supervision of crypto-asset service providers.
AMLA states that it stands ready to support the European Commission in its review of MiCA.
AMLA publishes consultation on draft standards for an EU-wide AML/CFT database
![]()
On 7 October 2026, the Anti-Money Laundering Authority (AMLA) published draft regulatory technical standards (RTS) on an EU-wide AML/CFT database, which establish the framework for the collection, reporting and retrieval of supervisory AML/CFT information across the EU supervisory system.
Key Takeaways:
- AMLA proposes a central AML/CFT database that will act as a single point through which supervisory authorities report and retrieve information on obliged entities, supervisors and supervisory activities.
- The draft RTS specify how and when supervisors must report information, including the required scope and level of detail, while aiming to minimise reporting burdens through the use of existing supervisory data and automated reporting processes.
- The standards also establish a materiality threshold for reporting breaches and define the circumstances under which AMLA may request additional information from supervisors.
The consultation process includes a public hearing scheduled for 3 November 2026, and stakeholders are invited to provide feedback on the draft standards until this date.
AMLA publishes final draft Regulatory Technical Standards on AML/CFT requirements for the private sector
![]()
BACKGROUND
On 1 October 2026, the Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) published a press release on the finalisation of three sets of draft regulatory technical standards (RTS). The RTS were developed under Regulation (EU) 2024/1624 (AMLR) and relate to Article 28(1) on customer due diligence, Article 19(9) on business relationships, occasional transactions and linked transactions, and Articles 16(4) and 17(3) on group-wide arrangements and third-country impediments. The publication forms part of the EU’s new AML/CFT framework and the move to a more harmonised AML/CFT rulebook through directly applicable Union legislation. It applies to obliged entities across the financial and non-financial sectors, as well as to supervisors, with certain provisions also addressing group structures, branches and subsidiaries in third countries, and entities such as football agents and professional football clubs.
WHAT'S NEW?
Business relationships and occasional transactions:
AMLA finalised RTS specifying how obliged entities are to distinguish between business relationships and occasional transactions and how linked transactions are to be identified. The RTS provide criteria for assessing elements such as duration, repetition, origin, destination and purpose of transactions, including targeted criteria for certain sectors such as currency exchange, money remittance, crypto-asset services, gambling, and football-related transfers. The RTS also confirm that no additional lower customer due diligence thresholds are introduced beyond those already provided in the AMLR.
Customer due diligence:
AMLA finalised RTS specifying the information and requirements for standard, simplified and enhanced customer due diligence. The text covers identification and verification of natural and legal persons, beneficial ownership, persons acting on behalf of customers, understanding the purpose and intended nature of the relationship or transaction, politically exposed person screening, and targeted financial sanctions screening. It also specifies the use of electronic identification means, relevant qualified trust services, alternative non-face-to-face verification measures, and risk factors relevant to supervisory exemptions for certain electronic money instruments.
Group-wide arrangements:
AMLA finalised RTS setting minimum requirements for group-wide AML/CFT policies, procedures and controls. These include governance, group-wide risk assessment, internal controls, whistleblowing, incident reporting, training, and information sharing within groups. The RTS also set out additional measures and supervisory actions where third-country legal or regulatory restrictions impede compliance with the AMLR. In addition, they establish criteria for identifying the parent undertaking in the Union in certain third-country group structures and conditions for applying group-wide requirements to other structures, including networks, partnerships and franchises sharing common ownership, management or compliance control.
WHAT'S NEXT?
The final draft RTS have been submitted to the European Commission for adoption. They are to be published in the Official Journal of the European Union once adopted. According to the press release, the RTS are proposed to apply six months after entry into force. For football agents and professional football clubs, the RTS are proposed to apply from 10 July 2029.
AMLA publishes final draft RTS on home-host supervisory cooperation for cross-border groups
![]()
BACKGROUND
On 1 October 2026, AMLA published its final report containing draft regulatory technical standards under Article 46(4) of Directive (EU) 2024/1640 on the respective duties of home and host AML/CFT supervisors and the modalities of cooperation between them. The draft RTS are intended to provide a harmonised framework for supervision of cross-border groups of obliged entities in both the financial and non-financial sectors. They are designed to address gaps in operational cooperation, particularly where no AML/CFT supervisory college is in place, and to support more consistent group-level supervision across the EU.
WHAT'S NEW?
Scope and structure:
The draft RTS establish a single horizontal framework for supervisory cooperation applicable across the financial and non-financial sectors. They apply to cooperation in relation to groups of obliged entities operating in different Member States and complement, rather than replace, the AML/CFT supervisory college framework where colleges are established.
Cooperation modalities:
The RTS are structured around three main forms of cooperation:
- Information exchange, including exchanges on request and on supervisors’ own initiative;
- Inquiries, including the conduct or facilitation of cross-border supervisory inquiries;
- Coordinated supervisory approaches, including coordinated or joint supervisory activities.
Information exchange and disclosure:
The RTS require supervisors to share, on their own initiative, information that could significantly influence the assessment of the inherent or residual risk exposure of an obliged entity in another Member State. This includes risk assessments, supervisory findings, relevant regulatory developments, and information on sanctions or administrative measures. Before requesting information, supervisors are expected to verify whether it is already available through registers or databases.
The RTS also set out a notification-based approach for onward disclosure of information within the EU AML/CFT supervisory system. Information exchanged under Article 46 AMLD may be disclosed to other members of the supervisory system without prior consent of the originating supervisor, subject to notification. Information originating from third-country counterparts remains subject to prior consent.
Practical arrangements:
The RTS specify request procedures, acknowledgment and response obligations, communication channels, record-keeping requirements, and minimum arrangements for cross-border inquiries. They also provide for agreed coordinated supervisory approaches, including documentation of scope, timeline, information-sharing arrangements, and possible coordinated follow-up.
WHAT'S NEXT?
The draft RTS will be submitted to the European Commission for adoption. They will then be published in the Official Journal of the European Union. Under Article 10 of the draft RTS, the Regulation will enter into force on the twentieth day following publication in the Official Journal. It will apply from 10 July 2027.
EU OJ publishes Council Decision (EU) 2026/2356 on signing the Additional Protocol on anti-money laundering measures
![]()
On 21 October 2026, the EU OJ published Council Decision (EU) 2026/2356, which authorises the signing, on behalf of the European Union, of the Additional Protocol to the Council of Europe Convention on Laundering, Search, Seizure and Confiscation of the Proceeds from Crime and on the Financing of Terrorism.
Key Takeaways:
- The Decision authorises the signing of the Additional Protocol by the European Union, subject to the Protocol's future conclusion. The Protocol was adopted by the Council of Europe Committee of Ministers on 15 May 2026 and was envisaged to be opened for signature on 14 October 2026.
- According to the Decision, the Protocol contains provisions concerning its purpose and scope, definitions of virtual assets and virtual asset service providers, suspension powers of financial intelligence units (FIUs), cooperation among FIUs, and the establishment of national central automated mechanisms containing information on bank accounts, payment accounts, securities accounts, safe-deposit boxes and virtual asset accounts.
The Council states that the Protocol has the potential to strengthen anti-money laundering frameworks and cooperation among Council of Europe Member States and other parties. The Decision also notes that the Protocol overlaps with several existing EU AML, asset recovery and confiscation measures.
The Decision entered into force on the date of its adoption, and the Protocol will subsequently be signed on behalf of the Union, subject to its future conclusion.
EU OJ publishes EC Implementing Regulation on formats for submitting beneficial ownership information
![]()
On 22 October 2026, the Official Journal of the European Union (OJ) published Commission Implementing Regulation (EU) 2026/2354 on formats for submitting beneficial ownership information, which establishes common formats, data fields and minimum submission requirements for reporting beneficial ownership information to national central beneficial ownership registers under the EU AML framework.
The Regulation applies to the submission of beneficial ownership information to central registers established under Directive (EU) 2024/1640. It covers beneficial owners, legal entities, legal arrangements, nominees, ownership and control structures, and related registration data. The Regulation is binding and directly applicable in all Member States.
Key Requirements:
- Establishes standardized formats for submitting beneficial owner data, including personal information, ownership interests, control mechanisms, legal entity information, legal arrangements and nominee arrangements.
- Requires the submission of ownership and control structure information, including organisational charts or structured data for complex ownership structures.
- Introduces a minimum checklist of information that must be provided before beneficial ownership submissions can be accepted by central registers.
Allows central registers to reuse data already available in other registers instead of requiring duplicate submissions.
The Regulation enters into force on the twentieth day following its publication in the Official Journal and applies from 10 July 2027. Member States and entities subject to the reporting requirements should prepare for implementation of the harmonised submission formats before the application date.
FINANCIAL PRODUCTS
EP publishes provisional deal on revitalising the EU securitisation market
![]()
On 21 October 2026, the European Parliament (EP) published “Savings and Investments Union: Deal on revitalising the EU’s securitisation market”, which announces a provisional political agreement between Economic and Monetary Affairs Committee (ECON) negotiators and the Council Presidency on amendments to the EU securitisation framework and prudential treatment of securitisation exposures.
The publication concerns the EU securitisation framework, including simple, transparent and standardised (STS) securitisations, prudential treatment of securitisation exposures, supervisory arrangements, transparency requirements and reporting obligations within the European Union. It applies to market participants involved in securitisation transactions and relevant supervisory authorities.
Key Requirements:
- The agreement introduces a revised approach for the capital treatment of securitisations, replacing fixed minimum risk weights with a formula linked to underlying asset quality in order to increase risk sensitivity. A 5% risk-weight floor was agreed for safer asset classes.
- ESMA will supervise third-party verifiers (TPVs) of STS criteria, including powers to withdraw authorisation for non-compliance. A new “comply or explain” mechanism between national authorities and the EBA will support supervisory convergence.
- The agreement distinguishes between public and private securitisations, introducing simplified reporting for private securitisations while maintaining full transparency requirements for public transactions. Specific reporting arrangements are introduced for collateralised loan obligations (CLOs).
The provisional agreement must be formally adopted by both the European Parliament and the Council before it can enter into force.
ESMA publishes Opinion on services related to non-MiCA-compliant stablecoins
![]()
On 8 October 2026, the European Securities and Markets Authority (ESMA) published the Opinion on the provision of crypto-asset services in relation to non-MiCA-compliant asset-referenced tokens and e-money tokens, which sets out supervisory expectations regarding the provision of crypto-asset services involving asset-referenced tokens (ARTs) and e-money tokens (EMTs) that do not comply with the Markets in Crypto-Assets Regulation (MiCA).
Key Takeaways:
- ESMA considers that authorised crypto-asset service providers (CASPs) should not provide crypto-asset services in relation to non-MiCA-compliant ARTs or EMTs, as doing so would expose clients to risks arising from the absence of MiCA safeguards and would be inconsistent with CASP obligations under MiCA.
- The supervisory expectation applies to all MiCA-regulated crypto-asset services, including trading platforms, exchange services, execution and transmission of orders, placing, advice, transfers, custody and portfolio management. CASPs should implement technical, contractual and organisational controls preventing EU clients from accessing or increasing exposure to non-compliant tokens.
- National competent authorities (NCAs) are expected to assess whether CASPs maintain or facilitate access to non-MiCA-compliant ARTs and EMTs. Limited residual services may be permitted only to support an orderly wind-down of existing positions, such as liquidation, conversion, withdrawal, transfer or safekeeping.
ESMA expects NCAs to require remediation of any remaining legacy exposures as soon as possible and no later than three months following publication of the Opinion, while continuing to monitor its implementation.
EU OJ publishes EC Delegated Regulation (EU) 2026/2343 amending EMIR RTS on clearing thresholds and review mechanisms
![]()
On 21 October 2026, the Official Journal of the European Union (OJ) published Commission Delegated Regulation (EU) 2026/2343 amending the regulatory technical standards laid down in Delegated Regulation (EU) No 149/2013 as regards the clearing thresholds and the mechanisms triggering their review, which updates the clearing threshold framework under EMIR and introduces mechanisms for reviewing those thresholds.
The Regulation applies within the framework of Regulation (EU) No 648/2012 (EMIR) and establishes clearing thresholds for financial and non-financial counterparties in relation to OTC derivatives. It introduces aggregate-position clearing thresholds for OTC credit and interest rate derivatives and recalibrates uncleared-position thresholds across OTC derivative asset classes. It is directly applicable in all EU Member States.
Key Requirements:
Sets aggregate-position clearing thresholds of EUR 1 billion for OTC credit derivatives and EUR 3 billion for OTC interest rate derivatives.
Establishes uncleared-position clearing thresholds of:
EUR 0.8 billion for OTC credit derivatives;
EUR 0.7 billion for OTC equity derivatives;
EUR 2.2 billion for OTC interest rate derivatives;
EUR 3 billion for OTC foreign exchange derivatives;
EUR 4 billion for combined OTC commodity and emission allowance derivatives.
Requires ESMA to assess at least annually a set of market indicators and initiate a review of clearing thresholds where significant changes are identified. These indicators include underlying prices, volatility, clearing rates, participation in clearing, inflation, global financial conditions, and geopolitical and economic policy uncertainties.
This Regulation enters into force on the twentieth day following its publication in the Official Journal of the European Union.
GOVERNANCE & ORGANISATION
ESAs publish 2027 Joint Committee Work Programme
![]()
On 13 October 2026, the European Supervisory Authorities (ESAs) published the 2027 Joint Committee Work Programme, which sets out the cross-sectoral regulatory, supervisory and policy priorities that will guide their joint activities across the EU financial sector during 2027.
Key Takeaways:
- The ESAs will prioritise digital operational resilience, including oversight of critical ICT third-party providers (CTPPs), supervisory convergence under DORA, ICT incident reporting, cyber-resilience coordination through the EU-SCICF framework, and support for the European Commission's potential DORA review.
- The programme includes work on consumer protection, sustainable finance, securitisation, financial conglomerates, innovation, AI, tokenisation and cross-sectoral risk monitoring. Expected outputs include technical standards, supervisory convergence initiatives, risk assessments, market monitoring, consultation activities and guidance.
- The ESAs will continue joint activities relating to SFDR, PRIIPs, financial conglomerates, External Credit Assessment Institutions (ECAIs), and the monitoring of BigTechs, Mixed Activity Groups (MAGs) and innovation trends in the EU financial sector.
The work programme outlines the planned deliverables and supervisory cooperation activities for 2027, with several initiatives expected to result in consultations, technical standards, reports, risk updates and supervisory convergence outputs throughout the year.
PAYMENTS & OPEN FINANCE
Council of the EU publishes Council first-reading position on the Directive on payment services in the internal market (PSD3)
![]()
BACKGROUND
On 23 October 2026, the Council of the European Union published its position at first reading on the proposed Directive on payment services in the internal market. The proposed Directive is part of the EU’s new payment services framework and would amend Directive 98/26/EC and Regulation (EU) 2023/1114, while repealing Directives 2009/110/EC and (EU) 2015/2366. Together with the parallel Regulation on payment services in the internal market, it would replace the current PSD2/e-money framework with a split model under which conduct-of-business rules sit mainly in a regulation and authorisation and supervision rules sit in the directive. The text is relevant to payment institutions, e-money issuers, account information service providers, payment initiation service providers, ATM deployers, crypto-asset service providers dealing with e-money tokens, and competent authorities.
WHAT'S NEW?
Single prudential and supervisory framework:
The Council text provides for a single authorisation framework for payment institutions, replacing the separate regime for electronic money institutions while preserving certain e-money-specific features. It also confirms the new split between the Directive, which governs authorisation and supervision, and the separate Regulation, which will contain the conduct-of-business and operational payment services rules.
Updated rules for e-money, crypto-assets and safeguarding:
The text clarifies the treatment of electronic money tokens under MiCA and provides that payment institutions may, subject to notification, provide certain crypto-asset services related to e-money tokens where those services are deemed equivalent to payment services. It also updates prudential requirements, including initial capital, own funds and safeguarding of users’ funds, with revised rules on segregation, insurance or comparable guarantees, and in some cases the use of settlement accounts.
Revised regimes for market access and cross-border activity:
The Council position refines the rules on agents, branches, outsourcing and home-host supervisory cooperation, and updates targeted exemption or registration regimes for small payment institutions, account information service providers, ATM deployers not servicing payment accounts, and cash withdrawals in retail stores without a purchase.
WHAT'S NEXT?
This is the Council’s first-reading position under the ordinary legislative procedure. The file now proceeds to the next stage of the legislative process with the European Parliament. Under the current draft, once adopted and published, Member States would be required to transpose and apply the Directive 21 months after its entry into force.
Council of the EU publishes first-reading position on the Regulation on payment services in the internal market
![]()
On 21 October 2026, the Council of the European Union (Council) published its Position of the Council at first reading with a view to the adoption of a Regulation on payment services in the internal market and amending Regulations (EU) No 1093/2010, (EU) No 260/2012, (EU) 2017/2394 and (EU) 2021/1230, which establishes a harmonised EU framework for payment services, open banking, fraud prevention, user protection, electronic money, and payment service provider obligations.
The Regulation applies to payment services provided within the Union by credit institutions, payment institutions, post office giro institutions, central banks (when not acting as public authorities), and public authorities in specified circumstances. It also imposes obligations on technical service providers, payment system operators, payment schemes, telecom providers, hosting providers, very large online platforms/search engines, and mobile device manufacturers for specific provisions. The Regulation is designated as a text with EEA relevance.
Key Requirements:
- Introduces enhanced anti-fraud measures, including mandatory payee verification, transaction-monitoring mechanisms, stronger liability and refund frameworks, and measures addressing impersonation fraud.
- Establishes a revised open banking regime with dedicated interfaces, consent dashboards, stronger access rights for payment initiation and account information service providers, and enforcement against barriers to data access.
- Introduces requirements relating to strong customer authentication, spending limits, refund rights, payment account access, transparency of fees, electronic money, and payment transactions involving electronic money tokens.
The Council position forms part of the ordinary legislative procedure and represents the Council’s first-reading position. The Regulation will enter into force on the twentieth day following publication in the Official Journal of the European Union and is intended to apply 21 months thereafter. Specific provisions on payee verification would apply 27 months after entry into force.
The next step is the continuation of the legislative process following the Council’s first-reading position.
PRUDENTIAL REQUIREMENTS
EC publishes draft Delegated Regulation amending initial margin requirements for counterparties falling below the threshold
![]()
On 28 October 2026, the European Commission (EC) published the draft Commission Delegated Regulation amending the regulatory technical standards laid down in Delegated Regulation (EU) 2016/2251 with regard to initial margin requirements applicable to contracts of counterparties that fall below the threshold, which proposes amendments to the EMIR Margin RTS to extend the initial margin exemption for certain non-centrally cleared OTC derivatives contracts.
The draft Regulation applies to counterparties subject to the margin requirements under EMIR and Delegated Regulation (EU) 2016/2251 for non-centrally cleared OTC derivatives within the EU/EEA framework.
Key Requirements:
- Where the aggregate month-end average notional amount (AANA) of non-centrally cleared OTC derivatives for March, April and May is below EUR 8 billion for one counterparty, counterparties may stop collecting initial margin and may release initial margin already collected for outstanding contracts.
- Where both counterparties exceed the EUR 8 billion threshold, initial margin requirements apply only to new OTC derivative contracts entered into between the counterparties.
The Regulation removes obsolete transitional provisions relating to single-stock and equity-index options following changes introduced under EMIR 3.
Counterparties falling below the threshold may apply the exemption as early as 1 June of the relevant year.
Counterparties moving above the threshold must apply initial margin requirements for new contracts no later than 1 January of the following calendar year.
The draft Regulation would enter into force on the 20th day following publication in the Official Journal of the European Union.
The next step is adoption of the Delegated Regulation and subsequent publication in the Official Journal of the European Union.
SUSTAINABILITY
EBA publishes Final Report on Certain Taxonomy Key Performance Indicators and Other Aspects of the Disclosures Delegated Act under Article 8 of the Taxonomy Regulation
![]()
On 29 October 2026, the European Banking Authority (EBA) published the Final Report on Certain Taxonomy Key Performance Indicators and Other Aspects of the Disclosures Delegated Act under Article 8 of the Taxonomy Regulation, which provides technical advice to the European Commission on targeted simplifications of Taxonomy disclosure requirements for financial institutions.
Key Takeaways:
- The EBA advises the European Commission to remove the Fees and Commissions KPI and the Trading Book KPI from Taxonomy disclosure requirements, citing limited decision-usefulness, operational complexity, implementation costs, and proportionality concerns.
- The EBA recommends narrowing the investment firms’ “other services” KPI to capital market-related activities (portfolio management, investment advice, underwriting and placing services), and suggests considering an asset-value-based methodology instead of a revenue-based approach.
- The EBA and other ESAs advise against introducing voluntary use of OpEx-based information in financial institution KPIs, support simplified group-level reporting based primarily on parent undertaking KPIs, and propose aligning grandfathering rules with the EU Green Bond Regulation while maintaining unlimited grandfathering for certain other Taxonomy-aligned financial instruments. The report also recommends simplifications to disclosure templates, including Green Asset Ratio (GAR) reporting.
The report has been submitted to the European Commission as technical advice and is expected to inform the Commission’s future review of the Disclosures Delegated Act.
EIOPA publishes Final Advice on the Review of (Re)Insurance Disclosures under the Taxonomy Disclosures Delegated Act
![]()
On 30 October 2026, the European Insurance and Occupational Pensions Authority (EIOPA) published Final Advice on the Review of (Re)Insurance Disclosures under the Taxonomy Disclosures Delegated Act, which provides technical advice to the European Commission on simplifying and improving Taxonomy disclosure requirements for (re)insurance undertakings and addressing selected cross-sectoral Taxonomy reporting issues.
Key Takeaways:
- EIOPA recommends targeted revisions to the current underwriting KPI, including standardising numerator calculations, limiting the denominator to the eight Taxonomy-eligible non-life lines of business, and renaming the metric as the “Adaptation Underwriting KPI” to better reflect its purpose.
- EIOPA advises replacing the current combined KPI with a reference KPI, determined by the most relevant activity (investment or underwriting), and removing disclosures on gas and nuclear activities from investment and underwriting templates.
- EIOPA advises against introducing a new Green Insured Activities KPI at this stage due to cost, methodological and data challenges, recommending reconsideration after five years. It also advises against voluntary use of OpEx KPIs by financial institutions and proposes a simplified approach to group reporting.
The Advice has been submitted to the European Commission to support the review of the Taxonomy Disclosures Delegated Act and may inform future legislative amendments.
ESMA publishes Final Report on Technical Advice on selected KPIs under the Taxonomy Disclosures Delegated Act
![]()
On 29 October 2026, the European Securities and Markets Authority (ESMA) published the Final Report on Technical Advice on selected KPIs under the Taxonomy Disclosures Delegated Act, which provides technical advice to the European Commission on simplifying EU Taxonomy reporting requirements while maintaining the relevance, comparability and reliability of disclosures.
Key Takeaways:
- ESMA recommends revising the mandatory OpEx KPI so that it focuses solely on non-capitalised R&D expenditure, while retaining existing materiality reliefs. ESMA does not recommend introducing a prescribed voluntary OpEx+ KPI and proposes safeguards for any voluntary Taxonomy-related disclosures.
- ESMA, together with the other ESAs, recommends not introducing the voluntary use of counterparties’ OpEx KPI in the Taxonomy disclosures of financial undertakings, including asset managers.
- ESMA recommends replacing the current weighted-average group Taxonomy reporting methodology with a parent undertaking-based reporting regime, complemented by simplified disclosures for material secondary businesses. It also proposes a range of additional reporting simplifications, including optional reliefs, cross-references to ESRS disclosures, phased implementation of amendments, clarification of IFRS 8 usage, retention of enabling and transitional activity reporting, and removal of the adjusted turnover KPI for sustainable bonds.
The report has been submitted to the European Commission for consideration as part of the ongoing review of the Taxonomy Disclosures Delegated Act.
ESMA publishes thematic notes on sustainability-related impact and climate transition claims
![]()
On 12 October 2026, the European Securities and Markets Authority (ESMA) published two thematic notes on clear, fair and non-misleading sustainability-related claims, focusing on impact claims and climate transition claims. The notes are educational in nature and are intended to help market participants communicate sustainability-related information in a consistent, transparent and non-misleading manner, while mitigating greenwashing risks. They do not create new regulatory requirements.
Key takeaways:
- ESMA reminds market participants that sustainability claims should comply with four overarching principles: they should be accurate, accessible, substantiated and up to date, particularly in non-regulatory communications such as marketing materials and voluntary reporting.
- In relation to impact claims, ESMA stresses the need to clearly explain the intended positive environmental or social impact, distinguish between investee impact and investor impact, clarify additionality where relevant, and support claims with appropriate KPIs, methodologies and reporting.
- In relation to climate transition claims, ESMA emphasises that market participants should clearly communicate their transition ambition, implementation strategy, assumptions, metrics, milestones and progress, including any limitations, updates or deviations from planned targets.
These thematic notes form part of ESMA’s broader work on sustainability-related disclosures and claims and include practical examples of good and poor practices to help market participants ensure that communications are clear, fair and not misleading.
INREV publishes new guidance for EUI and GHG emissions reporting
![]()
On 27 October 2026, the Institutional Real Estate Investors (INREV) published ESG SDDS: new guidance for EUI and GHG emissions reporting, which provides additional methodological clarifications and practical examples to support the calculation and reporting of Energy Use Intensity (EUI) and GHG emissions under the ESG Standard Data Delivery Sheet (ESG SDDS). The publication states that existing ESG SDDS KPIs, definitions and reporting requirements remain unchanged.
Key Takeaways:
- The guidance has been integrated into the ESG SDDS Wiring Guide and provides further clarification on reporting total area (ESG1.6), including floor area methodology, treatment of acquisitions and disposals, and consistency between floor area and related energy data.
- The guidance clarifies the calculation and reporting of actual and estimated energy consumption, including operational control considerations, treatment of EV charging and on-site renewable energy, and methodologies for estimating missing energy data.
The guidance provides additional clarification on energy intensity (EUI) and Scope 1 GHG emissions, including reporting boundaries, methodology consistency, scope allocation, emission factor selection and disclosure, and treatment of fugitive emissions.
INREV announced an online briefing on 17 November 2026 to discuss implementation, reporting experiences, challenges and lessons learned related to the new guidance.
BELGIUM
PRUDENTIAL REQUIREMENTS
BnB publishes circular on the EBA Opinion on IFRS 18 reporting in FINREP
![]()
On 21 October 2026, the Banque nationale de Belgique (BNB) published Circular NBB_2026_18 on the European Banking Authority (EBA) Opinion concerning profit and loss reporting in FINREP during the transitional period between the application of IFRS 18 and the amended EBA Implementing Technical Standards (ITS) on supervisory reporting.
Key Takeaways:
- IFRS 18 will apply to financial statements for financial years beginning on or after 1 January 2027, while the amended EBA ITS are expected to apply only from the September 2027 reference date. This creates a transitional period during which institutions will apply IFRS 18 to their financial statements before the corresponding FINREP amendments become mandatory.
- In line with the EBA Opinion of 8 July 2026, institutions may voluntarily use the revised IFRS 18-compliant FINREP templates from the 31 March 2027 reference period. For Belgian less significant institutions (LSIs), the BNB confirms that this option applies to both consolidated and solo FINREP, but only to templates affected by IFRS 18. Existing requirements remain unchanged for other FINREP templates. Institutions preparing solo FINREP under BGAAP may also use the revised templates during the transition period.
- Institutions choosing the option must submit both the separate IFRS 18-compliant FINREP module and the existing FINREP module. Both significant institutions (SIs) and LSIs are requested to notify the BNB whether they intend to use the revised templates.
The notification must be submitted by 16 November 2026 through OneGate using the FINREP_IFRS18 survey in the MBS domain. The BNB will consolidate the responses and inform the ECB and EBA before the end of 2026.
Moniteur Belge publishes law containing miscellaneous financial provisions
![]()
On 25 October 2026, the Moniteur belge published the law containing miscellaneous financial provisions, which amends several Belgian financial-sector laws and partially transposes Directives (EU) 2024/1619, 2024/2994 and 2019/2034.
The Law addresses several categories of Belgian financial-sector entities, including portfolio management and investment advisory companies, alternative investment funds and their managers, financial market operators and entities subject to Belgian AML/CFT legislation. It also contains provisions relating to financial-sector supervision, deposit and financial-instrument protection arrangements, the Resolution Fund and the Financial Services Guarantee Fund.
Key Requirements:
- Investment firms / portfolio managers: introduces or strengthens requirements concerning management-body suitability and periodic reassessment, diversity and gender balance, allocation and documentation of management responsibilities, ESG and ICT-related training, governance, prudential disclosure and CCP concentration-risk management. Management bodies must establish specific plans and quantifiable targets to monitor and address certain CCP concentration risks. The FSMA receives corresponding supervisory powers.
- AIFs: amends the Belgian AIF legislation, including reporting provisions. The FSMA may extend the reporting obligation to all or some non-public AIFs and certain other entities referred to in the legislation.
- AML/CFT and supervision: permits entities subject to the Belgian AML/CFT Law to use a validly obtained National Register identification number for data-file matching solely to determine whether records concern the same natural person for identification and identity-verification obligations. The Law also modifies FSMA information-sharing arrangements and financial-market infrastructure requirements.
Articles 12, 13, 15, 21 and 54 take effect from 1 September 2026. An entry-into-force date for the other provisions is not specified in the publication.
TAX
Moniteur Belge publishes law transposing Directive (EU) 2025/872 on administrative cooperation in taxation and amending the Belgian minimum tax framework
![]()
On 25 October 2026, the Moniteur Belge published a Law transposing Directive (EU) 2025/872, amending Directive 2011/16/EU on administrative cooperation in taxation and the Belgian Law of 19 December 2023 introducing a minimum tax for multinational enterprises and large-scale domestic groups.
The Law concerns the Belgian framework for minimum taxation of multinational enterprise groups and large-scale domestic groups and establishes rules for the automatic exchange of information relating to information returns concerning IIR and UTPR top-up taxes. It also amends the Belgian framework for the communication of financial-account information for international automatic exchange for tax purposes.
Key Requirements:
- Belgian ultimate parent entities or designated filing entities filing an information return must determine, through the electronic platform of the Federal Public Service Finance, the relevant parts and Member States to which information is to be disseminated. Where a correction is requested, a corrected information return must be filed within one month of receipt of the request.
- The Belgian competent authority must automatically exchange specified general and jurisdiction-specific parts of information returns with relevant Member States. Records received through automatic exchange must generally be retained for seven years.
- The Law revises administrative penalties. Depending on the infringement, penalties range from EUR 1,250 to EUR 125,000, while infringements involving fraudulent intent or an intention to cause harm can result in penalties of up to EUR 250,000.
The Law enters into force on the day of its publication in the Belgian Official Gazette, and the Belgian competent authority may first transmit information under the new exchange mechanism no earlier than 1 December 2026.
BRAZIL
CFO - FINANCE & ACCOUNTING
CVM publishes public consultation on updating accounting standards applicable to investment funds to adapt to international standards
![]()
On 5 October 2026, the Brazilian Securities and Exchange Commission (Comissão de Valores Mobiliários – CVM) published Public Consultation Notice SNC 01/26, which launches a public consultation on changes to the accounting rules applicable to investment funds in order to align the existing regulatory framework with international accounting standards currently adopted in the securities market.
Key takeaways:
According to the publication, the convergence process will be implemented in phases. The first phase will cover the migration of CVM Instructions 489, 516 and 579, as well as the funds referred to in Normative Annexes VIII, X and XII of CVM Resolution 175. The proposal is based on the full adoption of pronouncements issued by the Accounting Pronouncements Committee (Comitê de Pronunciamentos Contábeis – CPC), without creating differences from the International Financial Reporting Standards (IFRS).
The publication states that funds under Normative Annex VI of CVM Resolution 175, namely FIAGROS, are not included in this proposal because that framework already requires financial statements to be prepared in accordance with accounting standards applicable to listed companies, whose regulatory framework is already converged with IFRS.
CVM seeks comments on the following areas:
- operational challenges arising from application of international standards relevant to the investment fund industry;
- impacts of international convergence on the comparability of financial statements;
- independent audit procedures;
- regulatory and systemic adaptation costs;
- expected benefits for investors and other users of accounting information;
- proposed changes to the infrastructure of CVM systems receiving information, with a view to improving access, transparency and usability of reported information.
The publication indicates that comments and suggestions may be submitted until 4 December 2026, preferably by email or by post to CVM’s Rio de Janeiro address.
Overall, the consultation initiates a phased process to revise fund accounting rules and collect market input on operational, audit, systems, comparability and user-information implications of full convergence with international accounting standards.
DIGITAL
CVM publishes Resolution 249 establishing the CVM Distributed Ledger Technology (DLT) Pilot Program
![]()
On 14 October 2026, the Brazilian Securities and Exchange Commission (Comissão de Valores Mobiliários – CVM) published CVM Resolution 249, which establishes the CVM Distributed Ledger Technology (DLT) Pilot Program, an experimental testing initiative for operations involving securities on distributed ledger technology networks.
Key takeaways:
According to the publication, the pilot is intended to test experimental operations relating to the issuance, offering, distribution, trading, bookkeeping, custody, centralised deposit and settlement of securities using distributed ledger technology. The publication states that the initiative covers any type of security studied by the Tokenization Working Group (Grupo de Trabalho de Tokenização – GTT), including shares, debentures, receivables certificates, investment fund units and other securities or collective investment contracts.
The publication identifies the following purposes of the program:
- assess the technical, operational and legal feasibility of securities activities conducted through distributed ledger technology;
- test interoperability and connectivity arrangements between participants in the test networks;
- identify risks, vulnerabilities and regulatory gaps associated with adoption of distributed ledger technology in the securities market;
- provide evidence to support the work of the Tokenization Working Group (GTT) and any future proposals for regulatory or legal enhancements;
- foster cooperation among CVM, market participants, self-regulatory bodies and other competent authorities regarding distributed ledger technology-based infrastructures.
The publication explains that the coordination, supervision and control of the program will be carried out by the CVM Management Committee, composed of CVM members participating in the Tokenization Working Group. Conclusive reports received under the program will be submitted to the Collegiate through the coordination of the GTT in a final document evaluating the pilot, including results, identified risks and recommendations for possible regulatory or legal improvements.
The publication further notes that the resolution concludes the work of the Regulatory and Normative front of the GTT, while other workstreams remain ongoing, including Infrastructure and Cybersecurity, Governance, Studies and Institutional Articulation, and Market Supervision.
According to the publication, CVM Resolution 249 entered into force on the date of its publication, namely 14 October 2026.
OTHER
CVM publishes Circular Letter No. 4/2026 on go-live of the Intermediaries Management System
![]()
On 27 October 2026, the Brazilian Securities and Exchange Commission (CVM) — through the Superintendency of Market Relations and Intermediaries (SMI) — published Circular Letter No. 4/2026/CVM/SMI, which announces the full production launch of the Intermediary Management System for all participants supervised by SMI, complementing Circular Letter No. 1/2026/CVM/SMI of 20 January 2026.
The CVM has developed a new digital system for managing the registration, cadastral updates, compliance declarations, and cancellation requests of all market participants supervised by the SMI. The system entered production on 23 October 2026 and replaces the previous system.
The system applies to all participants supervised by CVM's SMI, specifically:
(a) Intermediaries: broker-dealers, distributors, investment banks, and multiple-service banks with investment portfolios — governed by CVM Resolution No. 35;
(b) Securities custodians — governed by CVM Resolution No. 32;
(c) Securities registrars (escrituradores) — governed by CVM Resolution No. 33;
(d) Central securities depositories — governed by CVM Resolution No. 31;
(e) Commodity brokers — governed by CVM Resolution No. 36;
Entities seeking authorisation for any of the above activities.
Main Requirements:
From 23 October 2026, all above participants must use the new system to:
- Report changes to cadastral data required by CVM Resolution No. 234.
- Annually update net equity (patrimônio líquido) values used as the basis for fee calculations under Law No. 7,940/1989.
- Submit the Electronic Compliance Declaration (DEC) per Art. 2, II, of CVM Resolution No. 234.
- Request cancellation of authorisation.
- Request new authorisation for the supervised activities.
System access: via the CVMWeb platform (sistemas.cvm.gov.br) with Gov.br login. The master user is the director responsible under the applicable regulation. This director may delegate cadastral update permissions to institution employees. Importantly, all delegations made in the previous system must be re-done in the new system.
An updated guidance manual has been published on the CVM website.
Investment advisors are excluded — their cadastral updates continue to be made through Ancord (the CVM-authorised credentialing entity) under CVM Resolutions Nos. 178 and 234.
CANADA
CLIENT CONDUCT
AMF publishes final amendments prohibiting chargebacks in investment fund distribution
![]()
On 8 October 2026, the Autorité des Marchés Financiers (AMF) published that Canadian Securities Administrators (CSA) published final amendments to National Instrument 31-103 – Registration Requirements, Exemptions and Ongoing Registrant Obligations, which prohibit the use of chargebacks in the distribution of publicly offered investment funds.
Key Requirements:
- The amendments prohibit chargeback arrangements in publicly offered investment fund distribution.
- Chargebacks occur when a dealing representative receives an upfront commission or payment and must repay some or all of that compensation if the client redeems securities before a specified period.
- The CSA considers chargebacks to create a significant conflict of interest because they may incentivize advisors to prioritize their own financial interests over those of clients.
Key Takeaways:
- The amendments are intended to enhance investor protection.
The CSA states that the prohibition aims to better align investment advice with clients’ interests.
The changes are intended to support fairer compensation practices and maintain investor confidence in Canadian capital markets.
The publication announces the finalization of the amendments and their objective of eliminating compensation structures that may create adviser-client conflicts of interest. No further implementation timeline is specified in the publication.
COLOMBIA
FINANCIAL PRODUCTS
URF publishes technical document proposing amendments to the investment regime for foreign assets held by Mandatory Pension Funds (FPOs)
![]()
On 7 October 2026, the Unidad de Regulación Financiera (URF) published“Proyecto de decreto por el cual se modifica el régimen de inversión en activos en el exterior de los fondos de pensiones obligatorias”, which supports a proposal to repeal the regulatory provisions introduced by Decree 369 of 2026 that imposed a 30% aggregate limit on foreign investments by Mandatory Pension Funds (FPOs).
Key Takeaways:
- The proposal would repeal Articles 2.6.12.1.27, 2.6.12.1.28 and 2.6.12.1.29 of Decree 2555 of 2010, which were introduced by Decree 369 of 2026 and established a 30% cap on foreign asset investments, related compliance conditions, and a transitional regime.
- According to the URF's analysis, the 30% limit reduces portfolio diversification and efficiency, increasing risk and lowering expected returns when compared with unconstrained portfolio allocations.
- The proposal is justified by changes arising from the implementation of Law 2381 of 2024 and the Constitutional Court's ruling, which alter the composition of pension fund participants and contribution flows, thereby affecting the assumptions underlying Decree 369 of 2026.
The document serves as the technical basis for a proposed decree that would repeal the foreign investment cap framework introduced by Decree 369 of 2026. The publication does not specify the date of adoption of the proposed decree.
FRANCE
FINANCIAL PRODUCTS
AMF publishes a revised instruction on the authorisation and operation of private equity funds / L'AMF publie une instruction révisée relative à l'agrément et au fonctionnement des fonds de capital-investissement
![]()
On 13 October 2026, the Autorité des marchés financiers published a revised version of Instruction DOC-2011-22 governing the authorisation, investor documentation, fund modifications and periodic reporting of French private equity funds.
The instruction applies to approved French private equity funds, including FCPRs, FCPIs and FIPs, and to the management companies responsible for them. It covers the creation, authorisation, marketing, modification and liquidation of these funds, as well as their key information documents, fund rules and periodic investor disclosures.
Key Takeaways:
- Applications, notifications and updated legal documents must generally be submitted through the Autorité des marchés financiers’s ROSA extranet. Additional information requested during an authorisation process must be provided within 60 days.
- The revised instruction introduces specific requirements for open-ended “evergreen” FCPRs. Changes to redemption frequency or notice periods that affect the minimum liquidity buffer require prior regulatory approval and may require investors to receive a fee-free exit opportunity.
- Management companies must select appropriate liquidity-management tools and retain a technical note documenting their selection, methodology and calibration for possible supervisory review.
- The instruction also sets out procedures for informing investors and the regulator of changes made during a fund’s lifecycle.
Key Timeline:
- 13 October 2026: Revised Instruction DOC-2011-22 became applicable.
- 16 April 2027: Transitional deadline for certain FCPRs established before 16 April 2026 to introduce or modify liquidity-management tools under simplified procedures, including redemption gates, extended notice periods and redemption fees payable to the fund.
Version française
Le 13 octobre 2026, l’Autorité des marchés financiers a publié une version révisée de l’instruction DOC-2011-22 régissant l’agrément, la documentation destinée aux investisseurs, les modifications apportées aux fonds et les déclarations périodiques des fonds de capital-investissement français.
Cette instruction s’applique aux fonds de capital-investissement français agréés, notamment les FCPR, les FCPI et les FIP, ainsi qu’aux sociétés de gestion qui en sont responsables. Elle couvre la création, l’agrément, la commercialisation, la modification et la liquidation de ces fonds, ainsi que leurs documents d’informations clés, leurs règlements et les informations périodiques destinées aux investisseurs.
Points clés :
- Les demandes, notifications et documents juridiques mis à jour doivent généralement être transmis via l’extranet ROSA de l’Autorité des marchés financiers. Les informations complémentaires demandées au cours d’une procédure d’agrément doivent être fournies dans un délai de 60 jours.
- L’instruction révisée introduit des exigences spécifiques pour les FCPR « evergreen » à capital variable. Les modifications de la fréquence de rachat ou des délais de préavis qui ont une incidence sur la réserve de liquidité minimale nécessitent l’accord préalable de l’autorité de régulation et peuvent obliger à offrir aux investisseurs une possibilité de sortie sans frais.
- Les sociétés de gestion doivent choisir des outils de gestion de la liquidité appropriés et conserver une note technique documentant leur sélection, leur méthodologie et leur calibrage en vue d’un éventuel contrôle prudentiel.
- L’instruction définit également les procédures d’information des investisseurs et de l’autorité de régulation concernant les modifications apportées au cours du cycle de vie d’un fonds.
Dates clés:
- 13 octobre 2026 : entrée en vigueur de l’instruction révisée DOC-2011-22.
- 16 avril 2027 : date limite transitoire pour certains FCPR créés avant le 16 avril 2026 afin de mettre en place ou de modifier des outils de gestion de la liquidité dans le cadre de procédures simplifiées, notamment des restrictions de rachat, des délais de préavis prolongés et des frais de rachat dus au fonds.
GOVERNANCE & ORGANISATION
The AMF publishes a decree on depositary reporting obligations and amendments to the fund regulatory framework / L'AMF publie un arrêté relatif aux obligations d'information des dépositaires et aux modifications apportées au cadre réglementaire des fonds
![]()
BACKGROUND
On 7 October 2026, the AMF published the Arrêté du 28 août 2026 approving amendments to Books III and IV of the AMF General Regulation. The amending order was published in the Journal officiel on 10 September 2026. The changes concern, in particular, depositaries of UCITS and AIFs, the AMF certification procedure, and the regime applicable to open-ended FCPRs (“FCPR evergreen”).
WHAT'S NEW?
Certification process and follow-up reporting:
The order amends Article II of AMF General Regulation provisions 312-5, 318-9, 321-39 and 325-26. The AMF must notify its decision on certification applications within four months from receipt of a file compliant with the standard dossier. Where the AMF requests additional information necessary for the review, the four-month period is suspended until receipt of that information. The applicant has six months from the AMF’s request to provide the requested elements; failing this, the certification application is deemed rejected.
The amendments also revise post-certification reporting obligations. A certified body must submit an information report to the AMF on the anniversary date of its certification and then every three years. In addition, it must provide the AMF each year with a simplified annual activity report.
Depositary information obligations for UCITS and AIFs:
New sections are inserted in Book III for UCITS and AIF depositaries:
- UCITS depositaries: if the stepped intervention procedure is applied in the event of non-compliance by a UCITS with a limit or restriction under Delegated Regulation (EU) 2016/438, the depositary must inform the AMF where the situation cannot be rectified. The depositary must also inform the AMF, no later than one calendar month after the end of each quarter, of any significant anomaly or irregularity already identified and corrected in the course of its duties.
- AIF depositaries: equivalent obligations are introduced where the stepped intervention procedure is applied under Delegated Regulation (EU) No 231/2013 and where significant anomalies or irregularities have already been identified and corrected.
FCPR provision:
Article 422-120-1 is amended to provide that, by derogation, the first paragraph of Article 422-21 applies to FCPRs under conditions set out in an AMF instruction.
WHAT'S NEXT?
The order states that both the order and its annex are to be published in the Official Journal of the French Republic. The amendment is approved through the publication of the order. No separate application date or transitional period is specified in the text provided.
PRUDENTIAL REQUIREMENTS
ACPR publishes a notice on compliance with amended EBA guidelines on the definition of default / L'ACPR publie un avis concernant la mise en conformité avec les lignes directrices modifiées de l'ABE relatives à la définition du défaut de paiement
![]()
On 27 October 2026, the Autorité de contrôle prudentiel et de résolution (ACPR) announced that it will apply the European Banking Authority’s amended guidelines on how financial institutions determine when a borrower or credit exposure must be classified as being in default.
Key takeaways:
- The amended guidelines clarify how institutions should identify and record defaults, including situations where borrowers are unlikely to repay their obligations or payments remain overdue.
- All institutions directly supervised by the ACPR must make every effort to apply the amended guidelines in their credit-risk processes.
- Institutions may need to review their internal default-identification rules, credit monitoring, risk models and regulatory reporting to ensure that defaults are recognised consistently with the amended approach.
- The changes may affect the classification of credit exposures and, consequently, institutions’ calculation of credit risk, risk-weighted assets and regulatory capital requirements.
Overall, the ACPR’s announcement confirms that directly supervised institutions should assess without delay whether their default-identification frameworks remain aligned with the EBA’s revised supervisory expectations.
Version française
Le 27 octobre 2026, l’Autorité de contrôle prudentiel et de résolution (ACPR) a annoncé qu’elle appliquerait les lignes directrices modifiées de l’Autorité bancaire européenne concernant la manière dont les établissements financiers déterminent à quel moment un emprunteur ou une exposition de crédit doit être classé(e) comme étant en défaut.
Points clés :
- Les lignes directrices modifiées précisent la manière dont les établissements doivent identifier et enregistrer les défauts de paiement, y compris les situations dans lesquelles les emprunteurs sont peu susceptibles de rembourser leurs obligations ou dans lesquelles les paiements restent en souffrance.
- Tous les établissements directement supervisés par l’ACPR doivent tout mettre en œuvre pour appliquer les lignes directrices révisées dans leurs processus de gestion du risque de crédit.
- Les établissements pourraient devoir revoir leurs règles internes d’identification des défauts, leur suivi des crédits, leurs modèles de risque et leurs déclarations réglementaires afin de s’assurer que les défauts sont identifiés de manière cohérente avec l’approche révisée.
- Ces modifications peuvent avoir une incidence sur la classification des expositions de crédit et, par conséquent, sur le calcul par les établissements du risque de crédit, des actifs pondérés en fonction des risques et des exigences de fonds propres réglementaires.
Dans l’ensemble, l’annonce de l’ACPR confirme que les établissements placés sous sa supervision directe doivent évaluer sans délai si leurs cadres d’identification des défauts restent conformes aux attentes prudentielles révisées de l’ABE.
AMF publishes an instruction on liquidity management for OPCIs and evergreen FCPRs / L'AMF publie une instruction relative à la gestion de la liquidité des OPCI et des FCPR « evergreen »
![]()
On 13 October 2026, the Autorité des marchés financiers (AMF) published Instruction DOC-2026-05, establishing liquidity-management requirements for real estate collective investment undertakings (OPCIs) and open-ended private equity funds known as evergreen FCPRs. The instruction does not apply to funds authorised under the ELTIF Regulation.
Key Takeaways:
- Management companies must maintain a permanent buffer of liquid assets to meet investor redemption requests and reduce the risk of redemption restrictions or suspensions.
- The minimum buffer depends on the fund’s redemption frequency or notice period: 10% for annual, 15% for semi-annual, 20% for quarterly and 25% for monthly redemptions, expressed as a percentage of net assets.
- The buffer, eligible liquid assets and the relevant redemption arrangements must be described in the OPCI prospectus or evergreen FCPR rules.
- The minimum buffer must generally be maintained at all times. If it falls below the applicable threshold, the management company must take appropriate steps to restore it while considering investors’ interests.
- Changes to redemption frequency or notice periods affecting the buffer require prior AMF approval and specific information for investors.
- When applying for initial authorisation, management companies must submit stress tests simulating, among other assumptions, 40% net outflows over 12 months, a minimum 20% loss in the value of unlisted assets, longer asset-sale periods and no access to borrowing.
- A reduced buffer may apply to eligible funds marketed exclusively through specified insurance or savings products, subject to contractual redemption limits or redemption caps.
Version française
Le 13 octobre 2026, l’Autorité des marchés financiers (AMF) a publié l’instruction DOC-2026-05, qui définit les exigences en matière de gestion de la liquidité applicables aux organismes de placement collectif immobilier (OPCI) et aux fonds de capital-investissement ouverts dits « FCPR evergreen ». Cette instruction ne s’applique pas aux fonds agréés au titre du règlement ELTIF.
Points clés :
- Les sociétés de gestion doivent maintenir une réserve permanente d’actifs liquides afin de répondre aux demandes de rachat des investisseurs et de réduire le risque de restrictions ou de suspensions de rachat.
- Le niveau minimum de cette réserve dépend de la fréquence des rachats ou du délai de préavis du fonds : 10 % pour les rachats annuels, 15 % pour les rachats semestriels, 20 % pour les rachats trimestriels et 25 % pour les rachats mensuels, exprimé en pourcentage de l’actif net.
- La réserve, les actifs liquides éligibles et les modalités de rachat applicables doivent être décrits dans le prospectus de l’OPCI ou dans les règles du FCPR à durée indéterminée.
- La réserve minimale doit en principe être maintenue à tout moment. Si elle tombe en dessous du seuil applicable, la société de gestion doit prendre les mesures appropriées pour la rétablir tout en tenant compte des intérêts des investisseurs.
- Toute modification de la fréquence des rachats ou des délais de préavis ayant une incidence sur la réserve nécessite l’accord préalable de l’AMF et la communication d’informations spécifiques aux investisseurs.
- Lors de la demande d’agrément initial, les sociétés de gestion doivent présenter des tests de résistance simulant, entre autres hypothèses, des sorties nettes de 40 % sur 12 mois, une perte d’au moins 20 % de la valeur des actifs non cotés, des délais de cession d’actifs plus longs et l’impossibilité de recourir à l’emprunt.
- Une réserve de liquidité réduite peut s’appliquer aux fonds éligibles commercialisés exclusivement par le biais de produits d’assurance ou d’épargne spécifiques, sous réserve de limites contractuelles de rachat ou de plafonds de rachat.
AMF publishes an updated instruction on liquidity management for private equity funds / L'AMF publie une mise à jour de ses instructions relatives à la gestion de la liquidité des fonds de capital-investissement
![]()
On 13 October 2026, the Autorité des marchés financiers (AMF) updated Instruction DOC-2011-22 governing the authorisation, investor documentation and periodic reporting of approved French private equity funds, including FCPRs, FCPIs and FIPs. The update mainly introduces liquidity-management requirements and transitional arrangements for open-ended FCPRs, referred to as FCPR evergreen, in connection with AIFMD II.
Key Takeaways:
- AMF Instruction DOC-2026-05 supplements the instruction regarding liquidity management by FCPR evergreen.
Changes to an FCPR evergreen’s redemption frequency or notice period that affect its minimum liquidity buffer require prior AMF approval and specific investor notification.
- A fee-free exit must be offered where such a change reduces the fund’s minimum liquidity buffer.
- FCPRs established before 16 April 2026 benefit from transitional arrangements until 16 April 2027 for introducing or adjusting liquidity-management tools.
- During this period, eligible funds may introduce or modify redemption gates, extended redemption notice periods and redemption fees payable to the fund under simplified notification procedures.
- Management companies remain responsible for selecting appropriate liquidity-management tools and must retain a technical note explaining their selection and methodology.
- Redemption gates for FCPR evergreen must permit investors to redeem at least 2% of the fund’s net assets each month.
Semi-annual reports must disclose the circumstances in which redemption gates were activated.
Version française
Le 13 octobre 2026, l’Autorité des marchés financiers (AMF) a mis à jour l’instruction DOC-2011-22 régissant l’agrément, la documentation destinée aux investisseurs et les déclarations périodiques des fonds de capital-investissement français agréés, notamment les FCPR, les FCPI et les FIP. Cette mise à jour introduit principalement des exigences en matière de gestion de la liquidité ainsi que des dispositions transitoires pour les FCPR ouverts, dits « FCPR evergreen », dans le cadre de la directive AIFM II.
Points clés :
- L’instruction DOC-2026-05 de l’AMF complète l’instruction relative à la gestion de la liquidité des FCPR « evergreen ».
Toute modification de la fréquence de rachat ou du délai de préavis d’un FCPR « evergreen » ayant une incidence sur sa réserve minimale de liquidité nécessite l’accord préalable de l’AMF et une notification spécifique aux investisseurs.
- Une sortie sans frais doit être proposée lorsque cette modification réduit la réserve minimale de liquidité du fonds.
- Les FCPR créés avant le 16 avril 2026 bénéficient de dispositions transitoires jusqu’au 16 avril 2027 pour la mise en place ou l’ajustement d’outils de gestion de la liquidité.
- Au cours de cette période, les fonds éligibles peuvent mettre en place ou modifier des seuils de rachat, allonger les délais de préavis de rachat et instaurer des frais de rachat payables au fonds, dans le cadre de procédures de notification simplifiées.
- Les sociétés de gestion restent responsables du choix des outils de gestion de la liquidité appropriés et doivent conserver une note technique expliquant leur choix et leur méthodologie.
- Les seuils de rachat des FCPR «evergreen» doivent permettre aux investisseurs de racheter au moins 2 % de l’actif net du fonds chaque mois.
Les rapports semestriels doivent indiquer les circonstances dans lesquelles les seuils de rachat ont été activés.
AMF publishes an updated instruction on liquidity management for real estate investment funds / L'AMF publie une mise à jour de ses instructions relatives à la gestion de la liquidité des fonds d'investissement immobiliers
![]()
On 13 October 2026, the Autorité des marchés financiers (AMF) updated Instruction DOC-2011-23 on the authorisation, documentation and periodic reporting requirements applicable to OPCIs and professional real estate collective investment undertakings. The principal amendments concern liquidity-management arrangements for open-ended OPCIs and the implementation of AIFMD II requirements.
Key Takeaways:
- Management companies of open-ended OPCIs must select at least two appropriate liquidity-management tools, taking account of the fund’s investment strategy, liquidity profile and redemption policy.
- For OPCIs created before 16 April 2026, transitional measures apply until 16 April 2027 for introducing or adjusting certain liquidity-management tools.
- During the transitional period, eligible OPCIs may introduce or modify redemption gates, extended redemption notice periods and redemption fees under simplified investor-information arrangements.
- Management companies remain responsible for selecting appropriate tools and must retain a technical note explaining their selection and methodology.
- For non-professional OPCIs, redemption gates must permit monthly redemptions of at least 2% of the fund’s net assets.
- Changes to redemption frequency or notice periods that affect the minimum liquidity buffer require AMF approval and specific investor notification. A fee-free exit must be offered where the change reduces the buffer.
- Semi-annual reports must disclose the use of redemption gates and provide information on fund liquidity, including liquid assets and significant investors.
Version française
Le 13 octobre 2026, l’Autorité des marchés financiers (AMF) a mis à jour l’instruction DOC-2011-23 relative aux obligations d’agrément, de documentation et de déclaration périodique applicables aux OPCI et aux organismes de placement collectif immobilier professionnels. Les principales modifications concernent les dispositifs de gestion de la liquidité des OPCI ouverts et la mise en œuvre des exigences de la directive AIFMD II.
Points clés :
- Les sociétés de gestion d’OPCI ouverts doivent sélectionner au moins deux outils de gestion de la liquidité adaptés, en tenant compte de la stratégie d’investissement du fonds, de son profil de liquidité et de sa politique de rachat.
- Pour les OPCI créés avant le 16 avril 2026, des mesures transitoires s’appliquent jusqu’au 16 avril 2027 pour la mise en place ou l’ajustement de certains outils de gestion de la liquidité.
- Pendant la période transitoire, les OPCI éligibles peuvent mettre en place ou modifier des seuils de rachat, allonger les délais de préavis de rachat et appliquer des frais de rachat dans le cadre de modalités simplifiées d’information des investisseurs.
- Les sociétés de gestion restent responsables du choix des outils appropriés et doivent conserver une note technique expliquant leur sélection et leur méthodologie.
- Pour les OPCI non professionnels, les seuils de rachat doivent permettre des rachats mensuels d’au moins 2 % de l’actif net du fonds.
- Les modifications de la fréquence de rachat ou des délais de préavis qui ont une incidence sur la réserve de liquidité minimale nécessitent l’accord de l’AMF et une notification spécifique aux investisseurs. Une sortie sans frais doit être proposée lorsque la modification réduit cette réserve.
- Les rapports semestriels doivent mentionner le recours à des seuils de rachat et fournir des informations sur la liquidité du fonds, notamment sur les actifs liquides et les investisseurs significatifs.
GERMANY
DIGITAL
Bundesregierung publishes adoption of the Digital Identity Act enabling the German EUDI Wallet
![]()
On 15 October 2026, the German Federal Government (Bundesregierung) published information announcing that the German Bundestag had adopted the Digital Identity Act (Digitale Identitätengesetz – DIdG), which establishes the legal basis for the use of the European Digital Identity Wallet (EUDI Wallet) in Germany. The law enables citizens to identify themselves digitally via smartphone and use digital credentials and documents across the European Union.
Key Requirements:
- The Digital Identity Act creates the legal framework for the German implementation of the EUDI Wallet, allowing users to store, manage and validate digital identity credentials and other personal documents electronically.
- The wallet will support electronic identification and the provision of digital proofs and credentials, facilitating access to public services, banking activities and online contractual processes.
- The framework is based on the underlying EU regulation establishing a common legal framework for digital identity across EU Member States.
The Bundesrat publishes Digital Identity Act
![]()
On 30 October 2026, the German Bundestag (Deutscher Bundestag) published the Digital Identity Act (Digitale Identitätengesetz – DIdG), which establishes the national legal framework for implementing the European Digital Identity Wallet and amends several existing laws related to electronic identification and digital credentials.
Key Takeaways:
- The Act introduces and updates provisions governing the deployment, operation and supervision of the European Digital Identity Wallet, including requirements relating to wallet provision, oversight arrangements and transparency obligations.
- The legislation enables the use of the wallet for electronic identification and authentication, including offline functionality through proximity technologies, and updates legal provisions concerning digital credentials, citizen accounts and electronic identification mechanisms.
- The Act shortens certain implementation periods from 24 months to 12 months and forms part of Germany’s implementation of the revised EU digital identity framework. A Bundesrat deadline of 20 November 2026 is referenced as the next stage in the legislative process.
The next step identified in the publication is the continuation of the legislative procedure, including consideration by the Bundesrat by 20 November 2026.
FINANCIAL CRIME
BGBL publishes Act implementing Directive (EU) 2024/1260 on asset recovery and confiscation
![]()
On 22 October 2026, the Federal Republic of Germany published the Gesetz zur Umsetzung der Richtlinie (EU) 2024/1260 über die Abschöpfung und Einziehung von Vermögenswerten, which implements Directive (EU) 2024/1260 on asset recovery and confiscation into German law. The Act introduces amendments to multiple German laws to establish asset recovery offices and asset management structures, facilitate cross-border cooperation, enable information exchange with other EU Member States, and strengthen procedures for tracing, freezing, managing and confiscating criminal assets.
Key Requirements:
- Designates the Federal Criminal Police Office (BKA) and public prosecutors’ offices as competent asset recovery and asset management authorities under Directive (EU) 2024/1260.
- Introduces detailed provisions governing requests for information between German asset recovery offices and equivalent authorities in other EU Member States, including mandatory deadlines, refusal grounds, safeguards and rules on the use of exchanged information.
- Amends criminal procedure rules relating to emergency sales of seized assets and introduces mechanisms for temporary freezing of assets identified through cross-border cooperation.
- Expands access to relevant administrative and official data for asset recovery purposes by amending tax, transport and shipping legislation.
The Act was enacted on 22 October 2026 and published in the Federal Law Gazette on 27 October 2026.
The Act enters into force on the day following its publication, except for Article 9, which enters into force on 20 November 2026.
The next step is the entry into force and application of the amended national provisions implementing Directive (EU) 2024/1260.
Federal Ministry of Finance publishes draft law implementing the Sixth EU Anti-Money Laundering Directive and strengthening AML prevention
![]()
On 28 October 2026, the German Federal Ministry of Finance (BMF) published the draft law "Draft Act to Implement the Sixth EU Anti-Money Laundering Directive and to Strengthen Anti-Money Laundering Prevention", which implements the EU AML legislative package of 31 May 2024, including the Sixth AML Directive (EU) 2024/1640, the AML Regulation (EU) 2024/1624, the AMLA Regulation (EU) 2024/1620, and amendments to the Financial Information Directive.
Key Takeaways:
- Germany proposes to repeal the current Money Laundering Act (GwG) and replace it with a new Anti-Money Laundering Act (GwBG) effective 10 July 2027, aligning national legislation with the directly applicable AML Regulation and AMLA framework.
- The draft introduces extensive enhancements to AML supervision, including a new Central AML Supervisory Coordination Office at BaFin, expanded powers for the Financial Intelligence Unit (FIU), stronger beneficial ownership verification requirements, and enhanced cooperation with AMLA and EU authorities.
- The proposal establishes a central access point for real estate information, modernises bank account register access and EU connectivity, strengthens Transparency Register controls, introduces procedures for inactive entities, and implements EU requirements regarding beneficial ownership, sanctions screening, and AML reporting.
Next Steps / Timeline:
- The draft law is intended to implement EU AML legislation by the required deadlines, with the new framework entering into force on 10 July 2027. Certain provisions, including the central real estate access framework and specific beneficial ownership requirements, include implementation milestones extending to 10 July 2029.
FINANCIAL PRODUCTS
The Bundesrat publishes law approving the Multilateral Competent Authority Agreement on the Automatic Exchange of Information under the Crypto-Asset Reporting Framework
![]()
On 30 October 2026, the German Bundesrat published the Act adopted by the German Bundestag concerning the Law on the Multilateral Agreement of 8 June 2023 between the competent authorities on the automatic exchange of information under the Crypto-Asset Reporting Framework, which records that the German Bundestag adopted the government bill without amendments.
Key Requirements:
- The publication states that the German Bundestag, at its 99th session on 8 October 2026, adopted without amendment the government’s draft law concerning the Multilateral Agreement of 8 June 2023 between competent authorities on the automatic exchange of information under the Crypto-Asset Reporting Framework (CARF).
- The publication does not provide further details on substantive obligations, reporting requirements, implementation measures, scope of entities, or operational requirements.
Next Steps / Timeline:
The publication indicates a Bundesrat deadline (Fristablauf) of 20 November 2026.
The next step indicated in the publication is the expiry of the Bundesrat deadline on 20 November 2026.
ICT & CYBERSECURITY
The Bundesrat publishes law implementing the Cyber Resilience Act
![]()
On 30 October 2026, the Bundesrat published the Act Implementing Regulation (EU) 2024/2847 on Horizontal Cybersecurity Requirements for Products with Digital Elements (Cyber Resilience Act), which adopts national measures to implement Regulation (EU) 2024/2847 (Cyber Resilience Act) in Germany and establishes related entry-into-force provisions.
Key Takeaways:
- The law provides for the implementation of the EU Cyber Resilience Act framework in Germany, including national provisions supporting the application and enforcement of Regulation (EU) 2024/2847 on cybersecurity requirements for products with digital elements.
- The Bundestag adopted the legislation with amendments, including revised provisions on the commencement of certain measures linked to the German Federal Office for Information Security (BSI) framework and related implementing provisions.
- The publication specifies entry-into-force arrangements for certain provisions and identifies the next legislative step in the German procedure, with a Bundesrat deadline of 20 November 2026. Certain provisions enter into force on the day following promulgation.
The next step indicated in the publication is completion of the remaining legislative procedure involving the Bundesrat before the stated deadline of 20 November 2026.
PRUDENTIAL REQUIREMENTS
BaFin publishes application of EBA Guidelines on criteria for identifying ancillary services undertakings
![]()
On 6 October 2026, the Federal Financial Supervisory Authority (BaFin) confirmed through a compliance notification that it will apply the EBA Guidelines on the criteria for identifying activities under Article 4(1)(18) of Regulation (EU) No 575/2013 (EBA/GL/2026/01) in its supervisory practice.
The publication explains how BaFin interprets the concepts of “dependence on banking activity” and “dependence on financial resources” when determining whether an undertaking qualifies as an ancillary services undertaking under the CRR framework.
Key Takeaways:
- BaFin will incorporate the EBA Guidelines into its administrative practice and supervisory approach.
“Dependence on banking activity” exists where a company’s core business model would not function, or would be significantly impaired, without banking products or banking services provided by an institution or financial institution within the group.
“Dependence on financial resources” is interpreted, in line with paragraph 15 of the Guidelines, as dependence on lending activities, guarantees and credit commitments referred to in Annex I of Directive 2013/36/EU.
The publication confirms BaFin’s application of the EBA Guidelines within its supervisory practice.
BaFin publishes methodology for capital guidance from 2026
![]()
On 8 October 2026, the Federal Financial Supervisory Authority (BaFin) published the supervisory communication“08/2026 (BA): Methodology for Capital Guidance from 2026”, which sets out how BaFin will inform credit institutions about capital guidance and how such guidance will be calculated.
Key Takeaways:
- BaFin will issue capital guidance using a risk-based methodology. Under the new approach, only institutions that fall below specified capital thresholds under the adverse scenario of the supervisory stress test for small and medium-sized institutions (LSI stress test) will be expected to hold additional own funds.
- Participating institutions will be able to identify, already during completion of the stress-testing questionnaires, whether they are likely to receive a recommendation for additional own funds from the supervisor.
- BaFin states that the methodology is intended to reduce burden on institutions and forms part of broader efforts to make supervision more proportionate and risk-oriented while reducing bureaucracy.
The new methodology applies to institutions and groups falling within the scope of Section 6d(1) of the German Banking Act and will be used by BaFin when determining capital guidance recommendations.
BaFin publishes supervisory communication on the methodology for Own Funds Guidance (EME/P2G) from 2026
![]()
On 8 October 2026, the Federal Financial Supervisory Authority (BaFin) published Supervisory Communication 08/2026 (BA): Methodology for Own Funds Guidance (OFG) from 2026, which sets out the methodology and supervisory process for determining institutions’ Own Funds Guidance (Eigenmittelempfehlung, EME/Pillar 2 Guidance) under the German LSI supervisory stress-testing framework.
Key Takeaways:
- BaFin introduces a revised approach whereby only institutions whose capital ratios in the adverse LSI stress-test scenario fall below TSCR plus a 500-basis-point buffer will receive a recommendation for additional own funds (EME/P2G). Institutions with an indicative EME of zero will generally no longer receive a separate supervisory letter.
- The EME calculation remains based on stress-test capital depletion multiplied by a supervisory calibration factor, subject to a maximum of 1,000 basis points, with continued offsetting against the capital conservation buffer, resulting in a maximum net EME of 750 basis points.
- For the 2026 LSI stress test, BaFin has set the calibration factor at 65%. The factor will be recalibrated after each future LSI stress test.
The communication applies from 8 October 2026 until 30 August 2028 and is intended to promote transparency, consistency and simplification of supervisory processes relating to EME/P2G determination. BaFin indicates that, should the approach become established, it is expected to be incorporated into a future circular.
The next step is the application of this methodology within future LSI stress-test exercises, with recalibration of the calibration factor following each stress test cycle.
IRELAND
CAPITAL MARKETS
CBI publishes an update on implementing ESMA guidelines for preventing and detecting crypto-asset market abuse
![]()
On 12 October 2026, the Central Bank of Ireland published that it complies with the ESMA guidelines on supervisory practices for preventing and detecting market abuse under the MiCA Regulation.
Key Takeaways:
- The guidelines establish supervisory practices for identifying and preventing market abuse involving crypto-assets.
- They cover insider dealing, unlawful disclosure of inside information and market manipulation.
- Their implementation aims to support consistent supervision of crypto-asset markets across the EU.
The Central Bank of Ireland will apply the guidelines as part of its supervision under MiCA.
ICT & CYBERSECURITY
CBI publishes a consultation paper on good practices for managing third-party risks
![]()
On 8 October 2026, the Central Bank of Ireland published Consultation Paper CP173 – Guidance on Good Practices for the Sound Management of Third-Party Risks, which seeks stakeholders’ views on proposed non-binding guidance for managing risks arising from material third-party arrangements. The final guidance will replace the Cross-Industry Guidance on Outsourcing (2021).
Key Takeaways:
- The Guidance broadens the existing focus beyond traditional outsourcing to cover material dependencies arising from arrangements with cloud service providers, technology and software vendors, data processors, fintech partners, joint ventures, intra-group providers and other third parties. It follows the full third-party lifecycle, covering governance, pre-engagement risk assessment, due diligence and contracting, ongoing monitoring, operational continuity, and termination or exit planning.
- Firms would remain fully accountable for services performed by third parties. The Guidance proposes an outcomes-based and proportionate approach, allowing firms to adapt their governance, oversight and controls according to their size, complexity, business model, risk profile and the materiality of their third-party dependencies. It distinguishes between foundational and supporting good practices.
- The Guidance addresses supervisory concerns relating to inadequate oversight, due diligence, contractual protections, concentration risk, intra-group arrangements, offshoring, sub-outsourcing, monitoring and exit planning. It does not create new legal obligations, but it may inform the Central Bank of Ireland’s supervisory assessment of firms’ third-party risk management.
Stakeholders may submit responses until 3 December 2026. The final Guidance is expected in Q1 2027 and will take effect upon publication, when the existing 2021 outsourcing guidance will be withdrawn.
TAX
Department of Finance publishes a finance bill on tax, investment account, financial institution levy and VAT framework amendments
![]()
On 22 October 2026, the Irish Government published the Finance (No. 2) Bill 2026, introducing a broad package of tax and financial services measures to implement Budget 2027 commitments. The Bill contains amendments affecting financial institutions, investment products, life assurance policies, funds, and indirect tax obligations, while also extending certain sector-specific levies.
The measures are relevant to:
- Banks and credit institutions
- Investment firms
- Asset managers
- Fund management companies
- Insurance and life assurance undertakings
- Tax and finance functions across regulated firms
- Corporate taxpayers operating in Ireland
Key Takeaways:
- The Bill extends and amends the financial institutions levy, maintaining contributions from specified financial institutions into 2027.
- A new Individual Investment Account (IIA) regime is introduced, creating a tax framework for long-term retail investment products.
- The Bill includes amendments affecting investment undertakings, life assurance products and related tax provisions.
VAT measures introduce steps toward greater digitalisation and modernisation of reporting and invoicing requirements.
- The legislation implements a range of Budget 2027 taxation measures affecting businesses, investors and financial market participants.
Key Timeline
- Various measures will enter into force according to commencement dates specified in the legislation and subsequent enactment process.
- Certain provisions apply from 2027 onward, including the new Individual Investment Account framework and financial institution levy measures.
ITALY
CAPITAL MARKETS
Borsa Italiana publishes amendments to the Euronext Growth Milan Issuers’ Rules admission document requirements
![]()
On 15 October 2026, Borsa Italiana published the notice“Amendments to the Companies Rules Euronext Growth Milan Market Rules”, which revises Schedule Two of the Euronext Growth Milan Issuers’ Rules to simplify admission document requirements and align them with the revised EU Growth Prospectus framework introduced by the Listing Act (Regulation (EU) 2024/2809).
Key Takeaways:
- The minimum disclosure requirements for admission documents are aligned more closely with Annex 34 of Delegated Regulation (EU) 2019/980, as amended by the Listing Act, while requiring additional information on shareholders and share capital from specific sections of Annex 1.
- Financial disclosure requirements are updated to incorporate Section 8 of the EU Growth Issuance Prospectus framework, including the possibility of annexing financial statements instead of reproducing them in the admission document. Existing Euronext Growth Milan requirements regarding statutory audits, pro forma information and accounting standards continue to apply.
- Information required under Section 1 (Summary) of Annex 34 is only required where admission includes an offer to non-professional investors. Information under Section 9 (Management Report) must always be included irrespective of market capitalisation. The amendments also introduce specific references to disclosures on related-party transactions and material contracts where relevant.
The amendments enter into force on 21 October 2026. Companies submitting an admission application on or before 21 February 2027 may continue using the previous template, while applications submitted after that date must use the revised template.
Borsa Italiana publishes amendments to the Guide to the Parameters for Trading (Version 83)
![]()
On 12 October 2026, Borsa Italiana published Version 83 of the Guide to the Parameters for Trading on the markets organised and managed by Borsa Italiana, which updates trading parameters for Securitised Derivatives Markets (SeDeX and EuroTLX Cert-X segment) and introduces a new section on fees applicable to error handling procedures.
Key Takeaways:
- For instruments subject to bid-only quoting obligations, the upper price limit for trade execution (Virtual Offer Price – VOP) has been revised through the introduction of two additional tiers for bid prices above 500,000.
- A new section titled“Determination of the error handling fee” establishes the fees payable when market participants request activation of the error handling procedure. The fee is EUR 250 per cancelled or amended contract, subject to a maximum of EUR 500 where the cancellations or amendments arise from a single trading proposal (order or quote).
- For extraordinary error handling procedures under the SeDeX Market Rules and EuroTLX Market Rules, the applicable fee is EUR 1,000. Amendments to the price or quantity of an order or quote are treated as the entry of a new trading proposal for fee calculation purposes.
The amendments enter into force on 19 October 2026 and will be reflected in Version 83 of the Guide to the Parameters. The updated Guide will be published on Borsa Italiana’s website.
Borsa Italiana publishes amendments to the Market Rules and related Instructions
![]()
On 6 October 2026, Borsa Italiana published amendments to the Rules of the markets , following Consob approval on 8 September 2026. The amendments update listing, membership, disclosure, derivatives market and post-trading provisions, and will enter into force on 19 October 2026.
Key Takeaways:
- The amendments clarify that admissibility assessments under issuance programmes may also be issued for asset-backed securities (ABS) and other debt securities in the MOT market. When applying for listing under an approved programme, Borsa Italiana will assess both issuance features and any changes to programme characteristics.
- Admission procedures are simplified by removing the requirement for intermediaries to submit settlement-agent agreements where they are not direct settlement-system participants. In addition, prospectus deposit with Consob is removed as a validity condition for admission decisions, with the rules aligned to the publication requirements under Regulation (EU) 2017/1129. Disclosure obligations are also streamlined through the removal of certain statements no longer required under the Consob Markets Regulation.
- Further amendments update the error-management fee framework, revise certain operational rules applicable to Euronext Derivatives Milan, including order-entry timing requirements and cancellation of stock option series with zero open interest, and allow participants in guaranteed MOT transactions to choose alternative settlement services in line with central counterparty criteria.
The amendments will enter into force on 19 October 2026, while one specific post-trading change relating to settlement infrastructure will become effective on a date to be announced through a subsequent Borsa Italiana notice.
Italy publishes Legislative Decree No. 189 implementing the EU rules on multiple-vote share structures and adapting national legislation to the Listing Act package
![]()
On 21 October 2026, the Gazzetta Ufficiale della Repubblica Italiana (Official Gazette of the Italian Republic) published Legislative Decree No. 189 of 7 October 2026, which implements Directive (EU) 2024/2810 on multiple-vote share structures for companies seeking admission to trading on a multilateral trading facility and adapts Italian legislation to Regulation (EU) 2024/2809 aimed at enhancing the attractiveness of EU public capital markets and facilitating SME access to capital.
The decree applies to companies seeking admission to trading, or whose shares are admitted to trading, on multilateral trading facilities and SME growth markets, and amends the Italian Consolidated Law on Finance (TUF). It also updates Italy’s supervisory and sanctions framework relating to the Market Abuse Regulation (MAR).
Key Requirements:
- Introduces a new framework allowing companies with multiple-vote share structures to seek admission to trading on multilateral trading facilities and requires related transparency disclosures regarding share classes, voting rights, restrictions and significant holders of multiple-vote shares.
- Requires trading venues to clearly identify companies with multiple-vote share structures and allows CONSOB to adopt implementing measures.
- Amends national provisions implementing MAR, including powers of CONSOB, sanctioning provisions, administrative measures and procedures for handling delayed disclosure of inside information.
The decree enters into force on the day following its publication in the Official Gazette.
The next step is the application of the amended rules and any implementing measures that may be adopted by CONSOB
DIGITAL
Consiglio dei Ministri publishes Legislative Decree No. 179 adapting Italian law to the EU AI Act and establishing supervisory powers for AI oversight authorities
![]()
On 7 October 2026, the Italian Republic (Normattiva) published Legislative Decree No. 179, which adapts the Italian legal framework to Regulation (EU) 2024/1689 (AI Act) and establishes national authorities, supervisory powers and governance arrangements for the implementation and enforcement of AI-related requirements in Italy.
- The decree applies within Italy and complements the implementation of the EU AI Act. It designates national authorities and identifies sector-specific supervisory authorities, including Banca d’Italia, CONSOB and IVASS for the financial sector. The decree also defines “financial institutions” broadly, covering banks, investment firms, asset managers, fund managers, payment institutions, crypto-asset service providers, insurers, central securities depositories and central counterparties.
Key Requirements:
- Establishes the Italian governance framework for AI supervision, including the roles of AgID and the National Cybersecurity Agency (ACN) as national AI authorities.
- Confirms supervisory, inspection and enforcement powers required for implementation of the EU AI Act, including market surveillance arrangements and sanctioning powers.
Provides specific recognition of supervisory responsibilities for financial-sector authorities and references AI testing environments and FinTech experimentation frameworks.
The decree enters into force on 23 October 2026.
FINANCIAL CRIME
Italy publishes Legislative Decree implementing Directive (EU) 2024/1260 on asset recovery and confiscation
![]()
On 16 October 2026, the Italian Republic (Gazzetta Ufficiale della Repubblica Italiana) published the Legislative Decree implementing Directive (EU) 2024/1260 on asset recovery and confiscation, which introduces amendments to Italian criminal, procedural and anti-mafia legislation concerning confiscation, pre-confiscation sales of seized assets, and the treatment of crypto-assets subject to seizure and confiscation.
The decree implements Directive (EU) 2024/1260 and applies within the Italian legal framework governing confiscation, seizure, asset recovery, anti-mafia measures, criminal proceedings, and crypto-assets.
Key Requirements:
- Introduces new rules on confiscation in criminal cases, including confiscation by equivalent value, confiscation of assets transferred to third parties, and provisions requiring a temporal link between criminal activity and asset acquisition in certain confiscation cases.
- Expands procedural powers to identify assets subject to confiscation and establishes rules for the sale of seized assets before final confiscation where deterioration or significant inefficiencies may occur.
- Introduces provisions on seizure, custody and management of crypto-assets, including transfers to the Fondo Unico Giustizia and the creation of a dedicated crypto-asset portfolio management service.
Requires annual transmission of confiscation and seizure statistics to the European Commission.
The decree enters into force according to the publication provisions applicable to the legislative act; no separate application date is specified in the decree.
FINANCIAL PRODUCTS
CONSOB publishes amendments to implementing provisions on securitisation notifications and reporting obligations
![]()
On 8 October 2026, the Commissione Nazionale per le Società e la Borsa (CONSOB) published amendments to implementing provisions on securitisation notifications and reporting obligations
Key Takeaways:
- The amendments revise notification and reporting requirements applicable to securitisation transactions supervised by CONSOB, with the stated objective of reducing operational burdens for market participants and clarifying certain provisions.
- The decision clarifies responsibility for submitting compliance declarations regarding securitisation requirements under the EU Securitisation Regulation, including cases involving multiple originators, sponsors or transferring entities. It also introduces requirements to notify CONSOB of significant events affecting STS securitisations and to provide updated compliance declarations where relevant.
The amendments introduce new notification obligations concerning the closure of securitisation transactions and revise reporting timelines, including a one‑month deadline from issuance for certain securitisation notifications and immediate notification requirements for event-driven reporting. Delegation of information transmission to the servicer remains possible without transferring responsibility from the designated reporting entity.
The decision enters into force on the day following its publication in the Italian Official Gazette.
GOVERNANCE & ORGANISATION
Italy publishes amendments to Circular No. 288/2015 on transfers of significant portfolios of legal relationships in bulk
![]()
On 8 October 2026, the Banca d’Italia published “Amendments to Circular No. 288/2015 (Supervisory Provisions for Financial Intermediaries) concerning the transfer of significant portfolios of legal relationships in bulk”, which removes the requirement for prior supervisory authorization for significant bulk transfers of legal relationships by financial intermediaries.
Key Takeaways:
The publication reflects amendments introduced by Legislative Decree No. 208/2025 implementing CRD VI provisions relating to significant transfers of assets and liabilities.
The requirement for prior authorization for significant bulk transfers under Title V, Chapter 3 of Circular No. 288/2015 is abolished.
Such transfers must instead be notified to the Banca d’Italia sufficiently in advance of completion. Existing post-transaction notification requirements remain unchanged, and the supervisory powers of the Banca d’Italia are preserved.
The measure enters into force on the day following its publication in the Italian Official Gazette and also applies to ongoing procedures.
ICT & CYBERSECURITY
Italy publishes legislative decree aligning national cybersecurity certification rules with EU managed security services requirements
![]()
On 22 October 2026, the Gazzetta Ufficiale della Repubblica Italiana published Legislative Decree No. 191, which amends Italy’s national cybersecurity certification framework to align it with Regulation (EU) 2025/37 amending Regulation (EU) 2019/881 (Cybersecurity Act) regarding managed security services.
Key Requirements:
- Introduces the definition of “managed security services” into the national cybersecurity certification framework and extends relevant certification, conformity assessment, market surveillance, enforcement and sanctions provisions to such services.
- Updates obligations for providers, conformity assessment bodies and certification authorities, including requirements relating to cybersecurity certification, EU declarations of conformity, supervision, notifications and enforcement.
- Revises the powers and responsibilities of the Italian National Cybersecurity Agency (ACN) in relation to authorization, certification, oversight and enforcement activities connected with managed security services.
Timeline / Key Dates
Legislative Decree No. 191 was adopted on 1 October 2026 and published on 22 October 2026.
The decree implements national adjustments required by Regulation (EU) 2025/37 and takes effect according to the publication of the legislative decree. A specific separate application date is not specified in the publication.
The publication establishes the national legal amendments necessary to ensure the application of the EU cybersecurity certification framework to managed security services. No further implementation steps are specified in the publication.
Senato della Repubblica publishes draft legislative decree implementing Regulation (EU) 2024/2847 on cyber resilience
![]()
On 9 October 2026, the Senato della Repubblica published the draft legislative decree “Disposizioni per l’adeguamento della normativa nazionale al regolamento (UE) 2024/2847", which establishes the national framework for implementing Regulation (EU) 2024/2847 (Cyber Resilience Act) in Italy.
Key Requirements:
The draft decree:
- Designates the Agenzia per la Cybersicurezza Nazionale (ACN) as the national notifying authority and primary market surveillance authority for products with digital elements.
- Grants market surveillance powers to Banca d’Italia, CONSOB, IVASS and the Data Protection Authority for products with digital elements that are also classified as high-risk AI systems within their respective sectors.
- Establishes procedures for conformity assessment bodies, market surveillance, complaints handling, sanctions and cooperation among competent authorities.
- Creates a national Cyber Resilience Sandbox (Sandbox-CRA) to support testing and innovation for products with digital elements.
- Introduces national provisions regarding sanctions, coordination mechanisms, notification procedures and support measures for SMEs.
The draft legislative decree was approved in preliminary form by the Council of Ministers on 2 October 2026 and transmitted to Parliament for opinion. Parliamentary review is ongoing.
The decree supports application of the Cyber Resilience Act, under which notification obligations for vulnerabilities and severe incidents apply from 11 September 2026, conformity assessment notification provisions apply from 11 June 2026, and the general CRA requirements apply from 11 December 2027.
LUXEMBOURG
CAPITAL MARKETS
CSSF publishes a communication on marking one year to the EU's transition to T+1 settlement / La CSSF publie une communication marquant le premier anniversaire du passage de l'UE au règlement T+1
![]()
BACKGROUND
On 26 October 2026, the CSSF published a communiqué on the EU’s move to a T+1 securities settlement cycle, which is scheduled to take effect on 11 October 2027. The communiqué follows publication of the amended RTS on settlement discipline and ESMA’s revised Guidelines on standardised procedures and messaging protocols, which together complete the EU regulatory framework for the transition. The CSSF’s message is aimed at market participants across the trading and settlement chain, including investment firms, credit institutions, CSDs, fund managers and other relevant market infrastructures.
WHAT'S NEW?
Regulatory framework completed for T+1 transition:
The CSSF confirms that the EU regulatory framework for the move to T+1 is now complete following publication of the amended RTS on settlement discipline and ESMA’s revised Guidelines. These measures introduce new requirements on allocations, confirmations and messaging protocols, largely based on existing market practices and the 2025 recommendations of the EU T+1 Industry Committee.
Phased implementation and immediate preparation expected:
The new requirements will apply on a phased basis, with the first deadline falling on 7 December 2026 for investment firms and their clients to comply with the new allocations and confirmations requirements. Further implementation milestones will follow on 1 July 2027 and 11 October 2027. The CSSF calls on market participants to complete technical preparations, assess readiness across their wider ecosystem and begin end-to-end testing as soon as possible.
Mandatory standards for allocations and confirmations:
Under the revised ESMA Guidelines, market participants must use electronic, standardised communication channels, international messaging standards, and machine-readable communication methods, except where there are temporary technical disruptions. The CSSF emphasises that compliance with these requirements is essential to support a successful transition to T+1.
WHAT'S NEXT?
With the regulatory framework now in place, the focus shifts from rulemaking to implementation. ESMA and national competent authorities will monitor compliance with the new obligations, while market participants are expected to finalise system and process changes and test operational readiness ahead of the EU’s move to T+1 on 11 October 2027.
CFO - FINANCE & ACCOUNTING
CAA publishes Information Note 26/7 on multi-year contracts in statutory accounts / La CAA publie la note d'information n° 26/7 relative aux contrats pluriannuels dans les comptes statutaires
![]()
On 27 October 2026, the Luxembourg Commissariat aux Assurances (CAA) published Information Note 26/7 on the treatment of multi-year contracts in the statutory accounts of direct non-life insurance and reinsurance undertakings. The note clarifies existing accounting requirements under the amended Luxembourg Insurance Accounts Law of 8 December 1994 and does not introduce new regulatory requirements.
Supervisory work by the CAA identified inconsistencies in how Luxembourg insurers and reinsurers account for multi-year contracts, particularly where the firm contract duration, premium payment schedule and coverage period do not coincide. The note addresses this through clarification and a worked numerical example.
The note applies to Luxembourg-domiciled direct non-life insurance and reinsurance undertakings that prepare statutory accounts under the amended law of 8 December 1994. It also contains a supplementary section noting (without creating new obligations) the Solvency II implications for contract boundaries, best estimate cashflows and premium risk volume calculations.
Main requirements:
- Gross written premiums: For a firm multi-year contract without unilateral termination rights, the total premium for all years must be recognised as gross written premiums in the first financial year, even if not all amounts are invoiced or collected at that time.
- Earned premiums and the provision for unearned premiums (PPNA): Premiums relating to future coverage periods must be deferred through the PPNA. Only the portion attributable to the coverage provided in the current period constitutes earned premiums. Where the risk profile is non-uniform, a mechanical time-apportionment is not appropriate; methods reflecting the actual risk profile over time must be applied (Article 70 of the 1994 Law).
- Balance sheet presentation: The PPNA (liability) and premium receivables (asset) serve distinct purposes and must be assessed independently. For multi-year contracts, both items can show similar amounts without being directly linked. The PPNA represents the technical liability for future coverage; the receivable represents amounts due under already-recognised premiums.
- Worked example: A three-year non-life contract at 120 per year (360 total): at 30 June of year 1, 360 is recognised as gross written premium; 60 is earned (6 months of coverage); 300 is deferred via PPNA. On the balance sheet, 120 is cash received, 240 is a premium receivable, and 300 is PPNA — the net effect on results is equivalent to that of a comparable annual contract.
- Solvency II note (supplementary): Future premium receivables recognised in statutory accounts are reclassified as future inflows in the best estimate calculation per EIOPA Guideline 68. Premium risk volume under Article 116 of the Delegated Regulation (EU) 2015/35 must distinguish between premiums falling within the next 12 months and those beyond.
Version française
Le 27 octobre 2026, le Commissariat aux Assurances (CAA) du Luxembourg a publié la note d’information n° 26/7 relative au traitement des contrats pluriannuels dans les comptes statutaires des entreprises d’assurance non-vie directe et de réassurance. Cette note clarifie les obligations comptables existantes au titre de la loi luxembourgeoise modifiée du 8 décembre 1994 relative aux comptes des entreprises d’assurance et n’introduit pas de nouvelles exigences réglementaires.
Les travaux de surveillance menés par le CAA ont mis en évidence des incohérences dans la manière dont les assureurs et réassureurs luxembourgeois comptabilisent les contrats pluriannuels, en particulier lorsque la durée du contrat, le calendrier de paiement des primes et la période de couverture ne coïncident pas. La note aborde cette question en apportant des précisions et en proposant un exemple chiffré.
La note s'applique aux entreprises d'assurance non-vie directe et de réassurance domiciliées au Luxembourg qui établissent leurs comptes statutaires conformément à la loi modifiée du 8 décembre 1994. Elle contient également une section complémentaire soulignant (sans créer de nouvelles obligations) les implications de Solvabilité II concernant les limites des contrats, les flux de trésorerie estimés au mieux et les calculs du volume de risque lié aux primes.
Principales exigences :
- Primes brutes émises : pour un contrat pluriannuel ferme sans droit de résiliation unilatérale, le montant total des primes pour toutes les années doit être comptabilisé en primes brutes émises au cours du premier exercice, même si tous les montants ne sont pas facturés ou encaissés à ce moment-là.
- Primes acquises et provision pour primes non acquises (PPNA) : les primes relatives à des périodes de couverture futures doivent être reportées au travers de la PPNA. Seule la partie attribuable à la couverture fournie au cours de la période en cours constitue les primes acquises. Lorsque le profil de risque est hétérogène, une répartition temporelle mécanique n’est pas appropriée ; il convient d’appliquer des méthodes reflétant le profil de risque réel au fil du temps (article 70 de la loi de 1994).
- Présentation au bilan : la PPNA (passif) et les créances de primes (actif) ont des finalités distinctes et doivent être évaluées indépendamment. Pour les contrats pluriannuels, ces deux postes peuvent présenter des montants similaires sans pour autant être directement liés. La PPNA représente l’engagement technique au titre de la couverture future ; la créance représente les montants dus au titre des primes déjà comptabilisées.
- Exemple concret : un contrat d’assurance non-vie de trois ans à 120 par an (360 au total) : au 30 juin de la première année, 360 sont comptabilisés en primes brutes émises ; 60 sont comptabilisés comme primes acquises (6 mois de couverture) ; 300 sont reportés via la PPNA. Au bilan, 120 correspondent aux encaissements, 240 à une créance de prime et 300 à la PPNA — l’effet net sur le résultat est équivalent à celui d’un contrat annuel comparable.
- Note relative à Solvabilité II (complémentaire) : les primes à recevoir futures comptabilisées dans les comptes statutaires sont reclassées en entrées de trésorerie futures dans le calcul de la meilleure estimation, conformément à la ligne directrice n° 68 de l’EIOPA. Le volume de risque lié aux primes au titre de l’article 116 du règlement délégué (UE) 2015/35 doit établir une distinction entre les primes tombant dans les 12 prochains mois et celles au-delà.
DIGITAL
CSSF publishes its FAQ on Tokenisation / La CSSF publie sa FAQ sur la tokenisation
![]()
BACKGROUND
On 2 October 2026, the Commission de Surveillance du Secteur Financier (CSSF) published Version 1 of its FAQ on tokenisation. The document provides guidance under Luxembourg law on recurring questions raised to the CSSF in relation to tokenisation, with a particular focus on tokenised investment funds and control agent requirements under the Law of 6 April 2013 on dematerialised securities, as amended by the Law of 20 December 2024 (Blockchain Law IV). The FAQ is presented as non-exhaustive and does not constitute a complete guide on tokenisation. It applies to Luxembourg-supervised entities and other entities engaging with the CSSF in relation to tokenisation projects, including undertakings for collective investment (UCIs), investment fund managers, UCI administrators, control agents and other stakeholders involved in the issuance, record-keeping, settlement and distribution of tokenised assets.
WHAT'S NEW?
General approach to tokenisation:
The CSSF states that it acknowledges the potential benefits of tokenisation and applies a technologically neutral approach, assessing risks by reference to the use case rather than the technology itself. The FAQ also sets out the CSSF’s expectation that entities contact it at an early stage and provide a detailed description of the project, including the legal qualification of the tokens, the lifecycle of the assets, the role of stakeholders, contractual arrangements, outsourcing arrangements, and a preliminary assessment of licensing and administrative requirements.
Tokenisation of investment funds:
The FAQ confirms that Luxembourg UCIs may issue native tokens, meaning units or shares issued solely on DLT in token form, provided the operating model complies with the applicable regulatory framework. It clarifies that tokenised UCI units or shares may be issued in registered or dematerialised form, and that the use of DLT does not determine the legal form of the underlying securities.
The FAQ also clarifies that:
- a UCIA in charge of the registrar function remains required even where a control agent is appointed for dematerialised units or shares;
- a single entity may perform both the control agent and UCIA registrar functions, provided it holds the appropriate licences or authorisations;
- multiple UCIAs may act for the same UCI where both tokenised and traditional units or shares are issued, subject to conditions on task allocation, investor disclosure, consolidated record-keeping, risk management, and compliance with company law register requirements.
Control agent specificities:
The FAQ sets out the notification procedure and legal requirements to become a control agent, including the requirement to notify the CSSF at least two months in advance and, where relevant, to take account of separate outsourcing or ICT third-party notification timelines. It also addresses cross-border situations involving EEA entities and confirms that entities acting as control agents fall within the scope of DORA. In addition, it states that a control agent may use a third-party service provider for technical support, including in relation to tokenisation of UCIs, and refers to Circular CSSF 25/882 where ICT third-party arrangements support a critical or important function.
WHAT'S NEXT?
The FAQ states that it will be updated progressively as specific issues arise. The CSSF also states that it may adapt its approach to any matter covered by the FAQ at any time. Entities are invited to check the CSSF website regularly for updates, new guidance or changes of position. The CSSF also invites entities to engage in preliminary dialogue before initiating formal administrative procedures.
FINANCIAL CRIME
CRF publishes version 1.2 of its goAML indicators handbook / Le CRF publie la version 1.2 de son manuel sur les indicateurs goAML
![]()
On 19 October 2026, CRF published Version 1.2 of its Handbook Indicators, a collaborative tool designed to support reporting entities in the preparation of Suspicious Activity Reports (SARs) and Suspicious Transaction Reports (STRs) via the goAML platform. The handbook provides a structured indicator framework covering twelve categories, with associated descriptions, illustrative case studies, and an FAQ section. Version 1.2 follows Version 1.1 (September 2026) and Version 1.0 (May 2026) and introduces eight additional indicators across several categories. This analysis focuses specifically on the October 2026 update.
The handbook applies to all reporting entities subject to the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing (AML/CFT Law). It is addressed to all professionals subject to AML/CFT reporting obligations in Luxembourg, including financial institutions, payment institutions, CASPs, TCSPs, DNFBPs, and relevant national authorities.
Key Update — Version 1.2 additions (8 new indicators)
1) Category: Trigger of Suspicion (1 new indicator)
Prohibited goods or items: Select if the suspicion concerns the use, possession, purchase, sale, trafficking or other unlawful handling of prohibited goods or items.
2) Category: Product used for ML/TF (5 new indicators)
Child sexual abuse material (CSAM): Select if the product used for ML/TF involves CSAM.
Commercial sexual services: Select if the product involves commercial sexual services involving adults, including their provision, purchase, advertisement, promotion, facilitation, management, or any related activity.
Documents: Select if the product involves invoices, contracts, certificates, official records, identity documents, or other supporting documentation.
Drugs and pharmaceuticals: Select if the product involves drugs, pharmaceutical products, drug precursors, production equipment, or other items related to their manufacture, distribution, or trafficking.
Gift cards: Select if the product involves gift cards.
3) Category: Suspected person/entity (2 new indicators)
Director: Select if the suspected individual serves as a director, board member, or equivalent office holder within a legal entity.
DNFBP Client: Select if the suspected individual or legal entity is a client of a designated non-financial business or profession (DNFBP).
Existing framework (for context):
The full handbook covers twelve categories implemented in goAML: Reporting Mode; Trigger of Suspicion (33+ indicators); ML/TF Typology; ML/TF Affected Sector; Product used for ML/TF; Suspected Person/Entity; Suspected Predicate Offence; Suspicious Amount (nine ranges from EUR 0 to EUR 5m+); Time Elapsed (five ranges); Relationship Status; Crypto (five indicators); and E-commerce (six indicators). A thirteenth category ("Business Activity Related to Report") will be made available at a later stage.
Version française
Le 19 octobre 2026, le CRF a publié la version 1.2 de son « Manuel des indicateurs », un outil collaboratif conçu pour aider les entités déclarantes à établir des rapports d’activités suspectes (SAR) et des rapports de transactions suspectes (STR) via la plateforme goAML. Ce manuel propose un cadre structuré d’indicateurs couvrant douze catégories, accompagné de descriptions, d’études de cas illustratives et d’une section FAQ. La version 1.2 fait suite à la version 1.1 (septembre 2026) et à la version 1.0 (mai 2026) et introduit huit indicateurs supplémentaires répartis dans plusieurs catégories. La présente analyse porte spécifiquement sur la mise à jour d’octobre 2026.
Le manuel s’applique à toutes les entités déclarantes soumises à la loi modifiée du 12 novembre 2004 relative à la lutte contre le blanchiment d’argent et le financement du terrorisme (loi LBC/FT). Il s’adresse à tous les professionnels soumis à des obligations de déclaration en matière de LBC/FT au Luxembourg, y compris les établissements financiers, les établissements de paiement, les CASP, les TCSP, les DNFBP et les autorités nationales compétentes.
Mise à jour clé — Ajouts de la version 1.2 (8 nouveaux indicateurs)
1) Catégorie : Éléments déclencheurs de soupçons (1 nouvel indicateur)
Biens ou objets interdits : à sélectionner si le soupçon concerne l’utilisation, la possession, l’achat, la vente, le trafic ou toute autre manipulation illicite de biens ou d’objets interdits.
2) Catégorie : Produit utilisé à des fins de blanchiment de capitaux et de financement du terrorisme (5 nouveaux indicateurs)
Matériel pédopornographique (CSAM) : à sélectionner si le produit utilisé à des fins de blanchiment de capitaux ou de financement du terrorisme implique du matériel pédopornographique.
Services sexuels à caractère commercial : à sélectionner si le produit concerne des services sexuels à caractère commercial impliquant des adultes, y compris leur prestation, leur achat, leur publicité, leur promotion, leur facilitation, leur gestion ou toute activité connexe.
Documents : à sélectionner si le produit concerne des factures, des contrats, des certificats, des documents officiels, des pièces d’identité ou d’autres pièces justificatives.
Drogues et produits pharmaceutiques : sélectionnez cette option si le produit concerne des drogues, des produits pharmaceutiques, des précurseurs de drogues, du matériel de production ou d’autres articles liés à leur fabrication, leur distribution ou leur trafic.
Cartes-cadeaux : sélectionnez cette option si le produit concerne des cartes-cadeaux.
3) Catégorie : Personne ou entité soupçonnée (2 nouveaux indicateurs)
Dirigeant : sélectionnez cette option si la personne soupçonnée occupe un poste de dirigeant, de membre du conseil d’administration ou une fonction équivalente au sein d’une personne morale.
Client d’une entreprise ou profession non financière désignée (DNFBP) : Sélectionnez cette option si la personne physique ou morale soupçonnée est cliente d’une entreprise ou profession non financière désignée (DNFBP).
Cadre existant (pour le contexte) :
Le manuel complet couvre douze catégories mises en œuvre dans goAML : Mode de déclaration ; Éléments déclencheurs de soupçon (plus de 33 indicateurs) ; Typologie du blanchiment de capitaux et du financement du terrorisme (ML/TF) ; Secteur concerné par le ML/TF ; Produit utilisé à des fins de blanchiment de capitaux/financement du terrorisme ; Personne/entité suspecte ; Infraction principale présumée ; Montant suspect (neuf fourchettes allant de 0 EUR à plus de 5 millions d’euros) ; Délai écoulé (cinq fourchettes) ; Statut de la relation ; Cryptomonnaies (cinq indicateurs) ; et Commerce électronique (six indicateurs). Une treizième catégorie (« Activité commerciale liée à la déclaration ») sera mise à disposition ultérieurement.
CSSF publishes a communication announcing that AMLA adopted key regulatory technical standards / La CSSF publie une communication annonçant que l'AMLA a adopté des normes techniques réglementaires clés
![]()
On 7 October 2026, the CSSF published a communiqué drawing professionals' attention to the adoption by AMLA of three draft Regulatory Technical Standards (RTS) complementing Regulation (EU) 2024/1624 (AMLR). The draft RTS have been submitted to the European Commission (EC) for formal adoption and publication; the EC retains the right to amend them pursuant to Article 49 of Regulation (EU) 2024/1620 establishing AMLA. Notwithstanding the pending EC process, the CSSF strongly encourages professionals to begin preparatory work immediately.
The three draft RTS apply to a broad range of obliged entities under the AMLR, including credit institutions, investment firms, investment fund managers, investment funds and vehicles, payment institutions, EMIs, AISPs, CASPs, issuers of tokens, CSDs, data reporting service providers, crowdfunding service providers, securitisation undertakings, specialised PFS, support PFS, and mortgage credit intermediaries. The RTS are EU-wide in scope once formally adopted and published in the Official Journal of the EU.
The three draft RTS cover the following subject matters:
RTS 1: Definition of business relationships and occasional transactions: provides regulatory clarification on when a business relationship is established and when a transaction qualifies as occasional, with direct implications for the triggering of customer due diligence (CDD) obligations.
RTS 2: Customer due diligence measures: sets out detailed requirements on the application of CDD measures by obliged entities, complementing the AMLR's CDD framework.
RTS 3: Application of group-wide arrangements: specifies how obliged entities forming part of a group must implement group-wide AML/CFT policies, procedures, and controls.
AMLA has proposed a six-month transitional period following the entry into force of the final RTS after publication in the Official Journal of the EU, in each of the three draft RTS.
The CSSF recommends that professionals: (i) familiarise themselves with the draft RTS immediately; (ii) finalise their gap analysis based on a review of internal policies, procedures, and controls; and (iii) take internal preparatory steps, including at Compliance and IT level, to be ready to comply once the RTS become applicable.
Version française
Le 7 octobre 2026, la CSSF a publié un communiqué attirant l’attention des professionnels sur l’adoption par l’AMLA de trois projets de normes techniques de réglementation (RTS) complétant le règlement (UE) 2024/1624 (AMLR). Les projets de RTS ont été soumis à la Commission européenne (CE) en vue de leur adoption formelle et de leur publication ; la CE se réserve le droit de les modifier conformément à l’article 49 du règlement (UE) 2024/1620 instituant l’AMLA. Nonobstant la procédure en cours au sein de la CE, la CSSF encourage vivement les professionnels à entamer sans délai les travaux préparatoires.
Les trois projets de RTS s’appliquent à un large éventail d’entités assujetties au titre de l’AMLR, notamment les établissements de crédit, les entreprises d’investissement, les gestionnaires de fonds d’investissement, les fonds et véhicules d’investissement, les établissements de paiement, les émetteurs de monnaie électronique (EMI), les prestataires de services d’information sur les paiements (AISP), les prestataires de services de paiement en ligne (CASPs), les émetteurs de jetons, les dépositaires centraux de titres (CSD), les prestataires de services de déclaration de données, les prestataires de services de financement participatif, les entités de titrisation, les prestataires de services financiers spécialisés (PFS), les prestataires de services financiers de soutien (PFS) et les intermédiaires en crédit hypothécaire. Les RTS auront une portée européenne dès leur adoption formelle et leur publication au Journal officiel de l’Union européenne.
Les trois projets de RTS portent sur les thèmes suivants :
RTS 1 : Définition des relations d’affaires et des transactions occasionnelles : apporte des précisions réglementaires sur le moment où une relation d’affaires est établie et sur les conditions dans lesquelles une transaction est considérée comme occasionnelle, ce qui a des implications directes sur le déclenchement des obligations de vigilance à l’égard de la clientèle (CDD).
RTS 2 : Mesures de vigilance à l’égard de la clientèle : définit des exigences détaillées concernant l’application des mesures de vigilance à l’égard de la clientèle par les entités assujetties, en complément du cadre de vigilance prévu par l’AMLR.
RTS 3 : Application des dispositifs à l’échelle du groupe : précise comment les entités assujetties faisant partie d’un groupe doivent mettre en œuvre les politiques, procédures et contrôles en matière de lutte contre le blanchiment d’argent et le financement du terrorisme (AML/CFT) à l’échelle du groupe.
L’AMLA a proposé, dans chacun des trois projets de RTS, une période transitoire de six mois suivant l’entrée en vigueur des RTS définitifs après leur publication au Journal officiel de l’UE.
La CSSF recommande aux professionnels : (i) de se familiariser sans délai avec les projets de RTS ; (ii) de finaliser leur analyse des écarts sur la base d’un examen des politiques, procédures et contrôles internes ; et (iii) de prendre des mesures préparatoires en interne, notamment au niveau de la conformité et de l’informatique, afin d’être prêts à se conformer dès que les RTS deviendront applicables.
Luxembourg Government publishes the updated National Risk Assessment on Terrorist Financing / Le gouvernement luxembourgeois publie la version actualisée de l'évaluation nationale des risques liés au financement du terrorisme
![]()
On 7 October 2026, the Luxembourg Ministry of Justice published an article announcing the finalisation of Luxembourg's updated National Risk Assessment on Terrorist Financing (ENR FT 2026). The assessment was conducted under the direction of the Ministry of Justice and adopted by the AML/CFT Prevention Committee (Comité de prévention BC/FT) on 29 June 2026. It follows the ENR 2018 and ENR 2020 (which assessed ML and TF risks jointly), and the 2022 vertical TF risk assessment. The ENR FT 2026 updates the 2022 sectoral assessment and extends the analysis to all sectors and sub-sectors. It also responds to recommendations made by FATF in its 2023 mutual evaluation report of Luxembourg, which called for a deeper understanding and broader dissemination of TF risks.
The assessment covers all sectors and sub-sectors subject to AML/CFT obligations in Luxembourg, including financial sector entities, non-financial professionals, legal persons and legal arrangements, and non-profit organisations. It is addressed to competent authorities, supervisors, and obliged entities implementing a risk-based approach. The document is available in English on the official Luxembourg AML/CFT portal.
Key findings:
1) Threats
- The primary TF threat comes from lone actors, small cells, and foreign terrorist fighters with generally modest and legitimately sourced funding needs, predominantly linked to jihadist ideology, followed by far-right and ethno-nationalist groups. They use basic financial products offered by retail banks, payment institutions, EMIs, and increasingly virtual asset service providers. Threat level: medium.
- Scenarios involving organisations such as Islamic State and Al-Qaeda raising or transferring larger TF-linked funds remain largely theoretical; no evidence of materialisation through these channels. Threat level: low.
2) Vulnerabilities
- Retail and corporate banks / online banks: highest inherent risk in the banking sector, due to high transaction volumes, widespread card payments and online banking, and cross-border (predominantly European) client exposure.
- Payment institutions and EMIs: high inherent risk due to transaction speed, low amounts, and limited face-to-face interactions.
- Virtual asset service providers (VASPs): high inherent risk due to traceability vulnerabilities, transaction speed, and global reach.
- Wholesale banks, financing and investment banks, private banks, depositaries, investment funds, and pension funds: lower inherent risk due to product sophistication, high entry thresholds, discretionary mandates, and predominantly institutional clientele.
- Life insurance (unit-linked and savings products): medium inherent risk due to cross-border distribution and investment features; other insurance sub-sectors present lower risk.
- Non-financial sector professionals: car dealers present high inherent risk (transaction volumes, potential cash use); legal and accounting professions present medium to high risk related to company structuring and real estate transactions.
- Legal persons and legal arrangements: medium to high risk due to transparency and beneficial ownership vulnerabilities.
- Non-profit organisations: primary vulnerability linked to operational and geographic exposure in high-terrorism-risk regions with weak CFT frameworks, creating fund diversion risk at distribution stage.
3) Residual risk
Mitigation measures reduce inherent risks to predominantly low or medium residual levels. Areas requiring continuous monitoring and deeper analysis are identified. Luxembourg continues thematic assessments, including an update of the vertical risk assessment for legal persons and legal arrangements.
Version française
Le 7 octobre 2026, le ministère luxembourgeois de la Justice a publié un article annonçant la finalisation de la mise à jour de l'Évaluation nationale des risques liés au financement du terrorisme (ENR FT 2026) du Luxembourg. Cette évaluation a été menée sous la direction du ministère de la Justice et adoptée par le Comité de prévention BC/FT le 29 juin 2026. Elle fait suite à l’ENR 2018 et à l’ENR 2020 (qui évaluaient conjointement les risques de blanchiment de capitaux et de financement du terrorisme), ainsi qu’à l’évaluation verticale des risques liés au financement du terrorisme de 2022. L’ENR FT 2026 actualise l’évaluation sectorielle de 2022 et étend l’analyse à l’ensemble des secteurs et sous-secteurs. Elle répond également aux recommandations formulées par le GAFI dans son rapport d’évaluation mutuelle de 2023 sur le Luxembourg, qui appelait à une meilleure compréhension et à une diffusion plus large des risques liés au financement du terrorisme.
L’évaluation couvre tous les secteurs et sous-secteurs soumis aux obligations en matière de lutte contre le blanchiment d’argent et le financement du terrorisme au Luxembourg, y compris les entités du secteur financier, les professionnels non financiers, les personnes morales et les constructions juridiques, ainsi que les organisations à but non lucratif. Elle s’adresse aux autorités compétentes, aux autorités de surveillance et aux entités assujetties mettant en œuvre une approche fondée sur les risques. Le document est disponible en anglais sur le portail officiel luxembourgeois dédié à la lutte contre le blanchiment d’argent et le financement du terrorisme.
Principales conclusions :
1) Menaces
- La principale menace en matière de financement du terrorisme provient d’acteurs isolés, de petites cellules et de combattants terroristes étrangers ayant des besoins de financement généralement modestes et d’origine légitime, principalement liés à l’idéologie djihadiste, suivis par les groupes d’extrême droite et ethno-nationalistes. Ils utilisent des produits financiers de base proposés par les banques de détail, les établissements de paiement, les prestataires de services de monnaie électronique et, de plus en plus, les prestataires de services d’actifs virtuels. Niveau de menace : moyen.
- Les scénarios impliquant des organisations telles que l’État islamique et Al-Qaïda levant ou transférant des fonds importants liés au financement du terrorisme restent largement théoriques ; aucune preuve de concrétisation par ces canaux. Niveau de menace : faible.
2) Vulnérabilités
- Banques de détail et d’entreprise / banques en ligne : risque inhérent le plus élevé du secteur bancaire, en raison des volumes de transactions élevés, de la généralisation des paiements par carte et des services bancaires en ligne, ainsi que de l’exposition à une clientèle transfrontalière (principalement européenne).
- Établissements de paiement et prestataires de services de monnaie électronique (PSME) : risque inhérent élevé en raison de la rapidité des transactions, des faibles montants et des interactions en face à face limitées.
- Prestataires de services d’actifs virtuels (PSAV) : risque inhérent élevé en raison des vulnérabilités en matière de traçabilité, de la rapidité des transactions et de la portée mondiale.
- Banques de gros, banques de financement et d’investissement, banques privées, dépositaires, fonds d’investissement et fonds de pension : risque inhérent plus faible en raison de la sophistication des produits, des seuils d’entrée élevés, des mandats discrétionnaires et d’une clientèle principalement institutionnelle.
- Assurance-vie (produits liés à des fonds et produits d’épargne) : risque inhérent moyen en raison de la distribution transfrontalière et des caractéristiques d’investissement ; les autres sous-secteurs de l’assurance présentent un risque plus faible.
- Professionnels du secteur non financier : les concessionnaires automobiles présentent un risque inhérent élevé (volumes de transactions, utilisation potentielle d’espèces) ; les professions juridiques et comptables présentent un risque moyen à élevé lié à la structuration des sociétés et aux transactions immobilières.
- Personnes morales et constructions juridiques : risque moyen à élevé en raison des failles en matière de transparence et de propriété effective.
- Organisations à but non lucratif : principale vulnérabilité liée à l’exposition opérationnelle et géographique dans des régions à haut risque terroriste dotées de cadres de lutte contre le financement du terrorisme (CFT) faibles, ce qui crée un risque de détournement de fonds au stade de la distribution.
3) Risque résiduel
Les mesures d’atténuation réduisent les risques inhérents à des niveaux résiduels principalement faibles ou moyens. Les domaines nécessitant une surveillance continue et une analyse plus approfondie sont identifiés. Le Luxembourg poursuit ses évaluations thématiques, notamment une mise à jour de l’évaluation verticale des risques pour les personnes morales et les constructions juridiques.
GOVERNANCE & ORGANISATION
CSSF publishes a new notification form for IFMs intending to perform white-label business / La CSSF publie un nouveau formulaire de notification destiné aux gestionnaires de fonds d'investissement (IFM) souhaitant exercer des activités en marque blanche
![]()
On 8 October 2026, the CSSF published a communication informing the investment fund industry of the publication of a new dedicated notification form for Luxembourg-based IFMs intending to perform white-label business. The communication follows the adoption of the Law of 3 March 2026, which transposed Directive (EU) 2024/927 of 13 March 2024 into Luxembourg law, introducing additional requirements for IFMs managing or intending to manage a fund at the initiative of a third party.
The requirement applies to Luxembourg-based IFMs — both AIFMs under the Law of 12 July 2013 (the "Law of 2013") and management companies under the Law of 17 December 2010 (the "Law of 2010") that manage or intend to manage a fund at the initiative of a third party. This includes cases where: (i) the fund uses the name of a third-party initiator; or (ii) the IFM appoints a third-party initiator as a delegate pursuant to Article 13(2a) of the Law of 2013 and/or Article 111(2) of the Law of 2010.
Main requirements:
Any IFM wishing to undertake white-label business for the first time must submit detailed explanations and evidence of its compliance with the applicable articles to the CSSF by completing and submitting the new dedicated form published on the CSSF website. The IFM must take into account any conflicts of interest in its submission.
The CSSF reserves the right to request additional information at any time following the initial notification.
Version française
Le 8 octobre 2026, la CSSF a publié une communication informant le secteur des fonds d’investissement de la mise à disposition d’un nouveau formulaire de notification dédié aux gestionnaires de fonds d’investissement (IFM) établis au Luxembourg et souhaitant exercer des activités en marque blanche. Cette communication fait suite à l’adoption de la loi du 3 mars 2026, qui a transposé la directive (UE) 2024/927 du 13 mars 2024 dans le droit luxembourgeois, introduisant des exigences supplémentaires pour les gestionnaires de fonds d’investissement (GFI) qui gèrent ou ont l’intention de gérer un fonds à l’initiative d’un tiers.
Cette exigence s’applique aux gestionnaires de fonds d’investissement (IFM) établis au Luxembourg — qu’il s’agisse de gestionnaires de fonds d’investissement alternatifs (AIFM) relevant de la loi du 12 juillet 2013 (la «loi de 2013») ou de sociétés de gestion relevant de la loi du 17 décembre 2010 (la «loi de 2010») — qui gèrent ou ont l’intention de gérer un fonds à l’initiative d’un tiers. Cela inclut les cas où : (i) le fonds utilise le nom d’un initiateur tiers ; ou (ii) le gestionnaire de fonds d’investissement désigne un initiateur tiers en tant que mandataire conformément à l’article 13, paragraphe 2a, de la loi de 2013 et/ou à l’article 111, paragraphe 2, de la loi de 2010.
Principales exigences :
Tout IFM souhaitant exercer pour la première fois une activité en marque blanche doit fournir à la CSSF des explications détaillées et des preuves de sa conformité aux articles applicables, en remplissant et en soumettant le nouveau formulaire dédié publié sur le site web de la CSSF. L’IFM doit tenir compte de tout conflit d’intérêts dans sa demande.
La CSSF se réserve le droit de demander des informations complémentaires à tout moment après la notification initiale.
CSSF publishes communication clarifying professional secrecy exceptions / La CSSF publie une communication précisant les exceptions au secret professionnel
![]()
On 2 October 2026, the CSSF published a communication which clarifies the legal framework governing the CSSF's professional secrecy obligations and the exceptions thereto. The publication was issued in French only and was prompted by questions that emerged regarding the legal provisions limiting the CSSF's ability to communicate publicly on the exercise of its supervisory missions, as well as by the multiple publications of administrative sanctions. The communiqué does not introduce new rules; it recalls and explains the existing legal framework.
The communication is addressed to the financial sector at large, including supervised entities, financial sector professionals, and the public. It relates to the CSSF's own institutional confidentiality framework as defined by the Law of 23 December 1998 establishing the CSSF (the "Organic Law") and the various sectoral laws governing the financial sector under CSSF supervision. It has no specific geographic limitation beyond Luxembourg jurisdiction, and no entry-into-force date is applicable as it is an explanatory publication.
The communication sets out three principal elements of the existing framework:
1. The principle of professional secrecy:
Professional secrecy is established by Article 16 of the Organic Law, with criminal sanctions under Article 458 of the Luxembourg Penal Code (imprisonment of eight days to six months and a fine of EUR 500 to EUR 5,000).
The obligation applies to all persons working for the CSSF and constitutes an institutional confidentiality regime not merely a personal duty of discretion covering all confidential information received in the exercise of the CSSF's supervisory missions, including business secrets, financial information, and information related to investigative and sanctioning powers.
The same principle is reflected in sectoral laws applicable to supervised entities, including the Law of 5 April 1993 on the financial sector, the Law of 17 December 2010 on collective investment undertakings, the Law of 10 November 2009 on payment services, the Law of 12 July 2013 on alternative investment fund managers, and the Law of 30 May 2018 on markets in financial instruments.
2. Legal exceptions to professional secrecy
- Article 458 of the Penal Code provides two general exceptions: (i) where a person is called to testify in court; and (ii) where the law obliges or authorises disclosure. Beyond these, specific derogations exist in the following areas:
- Exchange of information between authorities: Article 16 of the Organic Law provides for strictly conditioned exchanges with other supervisory authorities, notably within the SSM framework, subject to reciprocal secrecy at the receiving authority, necessity for the exercise of their missions, and restriction of use to the stated purpose.
- Rights of defence: In cases falling under criminal law, the CSSF may communicate only the extracts it considers relevant; it is ultimately for the competent court to balance the rights of defence against the confidentiality obligation, as confirmed by CJEU case law (C-358/16).
- Publication of administrative sanctions: EU legislation transposed into Luxembourg sectoral laws establishes named publication of administrative sanctions as a principle, in order to reinforce deterrence, inform the public, and ensure accountability. This principle is subject to strict exceptions (e.g. risk to financial market stability, ongoing investigations, or disproportionate prejudice to the sanctioned person), which may result in deferred or anonymous publication. The CSSF conducts a case-by-case analysis prior to any publication decision, consistent with the adversarial principle (principe du contradictoire).
The CSSF affirms that the overall framework ensures rigorous and consistent application of the confidentiality obligation, while accommodating transparency duties and publication obligations, within the rule of law.
Version française
Le 2 octobre 2026, la CSSF a publié une communication visant à clarifier le cadre juridique régissant ses obligations en matière de secret professionnel ainsi que les exceptions à celles-ci. Publiée uniquement en français, cette communication fait suite à des questions soulevées concernant les dispositions légales limitant la capacité de la CSSF à communiquer publiquement sur l’exercice de ses missions de surveillance, ainsi qu’aux multiples publications de sanctions administratives. La communication n’introduit pas de nouvelles règles ; elle rappelle et explique le cadre juridique existant.
La communication s’adresse à l’ensemble du secteur financier, y compris les entités surveillées, les professionnels du secteur financier et le grand public. Elle porte sur le cadre institutionnel de confidentialité propre à la CSSF, tel que défini par la loi du 23 décembre 1998 portant création de la CSSF (la « loi organique ») et les différentes lois sectorielles régissant le secteur financier soumis à la surveillance de la CSSF. Elle ne comporte aucune limitation géographique spécifique au-delà du territoire luxembourgeois, et aucune date d’entrée en vigueur ne s’applique puisqu’il s’agit d’une publication explicative.
La communication expose trois éléments principaux du cadre existant :
1. Le principe du secret professionnel :
Le secret professionnel est établi par l’article 16 de la loi organique et est passible de sanctions pénales en vertu de l’article 458 du Code pénal luxembourgeois (emprisonnement de huit jours à six mois et amende de 500 à 5 000 euros).
Cette obligation s’applique à toutes les personnes travaillant pour la CSSF et constitue un régime institutionnel de confidentialité, et non pas simplement un devoir personnel de discrétion, couvrant toutes les informations confidentielles reçues dans le cadre de l’exercice des missions de surveillance de la CSSF, y compris les secrets d’affaires, les informations financières et les informations liées aux pouvoirs d’enquête et de sanction.
Ce même principe se retrouve dans les lois sectorielles applicables aux entités surveillées, notamment la loi du 5 avril 1993 relative au secteur financier, la loi du 17 décembre 2010 relative aux organismes de placement collectif, la loi du 10 novembre 2009 relative aux services de paiement, la loi du 12 juillet 2013 relative aux gestionnaires de fonds d’investissement alternatifs et la loi du 30 mai 2018 relative aux marchés d’instruments financiers.
2. Exceptions légales au secret professionnel
- L’article 458 du Code pénal prévoit deux exceptions générales : (i) lorsqu’une personne est appelée à témoigner devant un tribunal ; et (ii) lorsque la loi oblige ou autorise la divulgation. Au-delà de celles-ci, des dérogations spécifiques existent dans les domaines suivants :
- Échange d’informations entre autorités : l’article 16 de la loi organique prévoit des échanges strictement conditionnés avec d’autres autorités de surveillance, notamment dans le cadre du MSU, sous réserve du secret réciproque de l’autorité destinataire, de la nécessité pour l’exercice de ses missions et de la limitation de l’utilisation à la finalité indiquée.
- Droits de la défense : dans les affaires relevant du droit pénal, la CSSF ne peut communiquer que les extraits qu’elle juge pertinents ; il appartient en dernier ressort à la juridiction compétente de mettre en balance les droits de la défense et l’obligation de confidentialité, comme le confirme la jurisprudence de la CJUE (C-358/16).
- Publication des sanctions administratives : la législation de l’UE transposée dans les lois sectorielles luxembourgeoises établit comme principe la publication nominative des sanctions administratives, afin de renforcer l’effet dissuasif, d’informer le public et de garantir la responsabilité. Ce principe est soumis à des exceptions strictes (par exemple, risque pour la stabilité des marchés financiers, enquêtes en cours ou préjudice disproportionné pour la personne sanctionnée), qui peuvent entraîner une publication différée ou anonyme.
La CSSF procède à une analyse au cas par cas avant toute décision de publication, conformément au principe du contradictoire.
La CSSF affirme que le cadre global garantit une application rigoureuse et cohérente de l’obligation de confidentialité, tout en tenant compte des obligations de transparence et de publication, dans le respect de l’État de droit.
ICT & CYBERSECURITY
CAA publishes Circular 26/11 amending outsourcing and cloud computing rules / La CAA publie la circulaire n° 26/11 modifiant les règles relatives à l'externalisation et au cloud computing
![]()
On 20 October 2026, the Commissariat aux Assurances (CAA) published Circular Letter 26/11, which amends Circular Letter 22/16 on the outsourcing of important or critical operational activities or functions and abrogates Circular Letters 20/13 and 21/15 on cloud computing outsourcing. The amendments are driven by the entry into force of DORA (Regulation (EU) 2022/2554) on 17 January 2025, which superseded the EIOPA cloud outsourcing guidelines (EIOPA-BoS-20-002) that underpinned the abrogated circulars and introduced new requirements directly applicable to CAA-supervised entities.
The circular applies to all insurance and reinsurance undertakings supervised by the CAA and falling within the scope of DORA as determined by Article 2 of that Regulation. The amendments to Circular Letter 22/16 apply from 1 January 2027; the abrogations of Circulars 20/13 and 21/15 take effect immediately.
Main requirements:
1) Abrogations
- Circular Letter 20/13 (cloud computing outsourcing, implementing EIOPA-BoS-20-002): abrogated with immediate effect, as the underlying EIOPA guidelines were themselves abrogated with effect from 17 January 2025.
- Circular Letter 21/15 (amending and supplementing Circular Letter 20/13): abrogated with immediate effect for the same reason.
2) Amendments to Circular Letter 22/16
The principal substantive changes are:
1) Introduction: A new third paragraph is added explicitly acknowledging that DORA has applied since 17 January 2025 to CAA-supervised entities within its scope, and that DORA rules must be taken into account, in particular for outsourcing of important or critical operational functions.
2) Article 1 (definitions): Clarification that outsourcing arrangements include those belonging to the same group where the arrangement produces effects on the Luxembourg entity; reference to legal and prudential bases introduced.
3) Article 2 (legal bases): Four new legal bases are added to the list of applicable texts:
- DORA Regulation (EU) 2022/2554 (directly applicable, no transposition required);
- Delegated Regulation (EU) 2024/1773 (RTS on contractual arrangements for critical/important ICT services provided by third-party ICT service providers);
- Delegated Regulation (EU) 2025/532 (RTS on elements to determine and assess when sub-contracting ICT services supporting critical/important functions);
- CAA Circular Letter 25/1 on DORA (major ICT incident notification and information register obligations).
3) Article 7 (assessment obligations): Clarification that the assessment must be confirmed by the compliance officer and/or an approved manager within two months; reference to information register sections D01.X.0040 and D01.X.0070 (previously only D01.X.0040).
4) Article 8 (notification form): Addition of a seventh form section: D01.X.0070 — ICT service provider (additional due diligence and contractual provisions), requiring insurance and reinsurance undertakings to perform additional due diligence and ensure that outsourcing contracts contain additional contractual provisions, in particular where ICT service provision rests on a chain of ICT sub-contractors.
5) Article 9 (reporting): DORA reporting requirements are explicitly preserved ("Without prejudice to DORA reporting requirements").
Final provisions: The amendments introduced by Circular Letter 26/11 apply from 1 January 2027; the original Circular Letter 22/16 continues to apply from 1 November 2022 for outsourcing agreements concluded or amended from that date.
Version française
Le 20 octobre 2026, le Commissariat aux Assurances (CAA) a publié la circulaire n° 26/11, qui modifie la circulaire n° 22/16 relative à l’externalisation d’activités ou de fonctions opérationnelles importantes ou critiques et abroge les circulaires n° 20/13 et 21/15 relatives à l’externalisation dans le cadre du cloud computing. Ces modifications découlent de l’entrée en vigueur, le 17 janvier 2025, du règlement DORA (règlement (UE) 2022/2554), qui a remplacé les lignes directrices de l’EIOPA relatives à l’externalisation dans le cloud (EIOPA-BoS-20-002) sur lesquelles s’appuyaient les circulaires abrogées, et a introduit de nouvelles exigences directement applicables aux entités soumises à la surveillance du CAA.
La circulaire s’applique à toutes les entreprises d’assurance et de réassurance soumises à la surveillance de la CAA et relevant du champ d’application du règlement DORA, tel que défini à l’article 2 dudit règlement. Les modifications apportées à la circulaire n° 22/16 s’appliquent à compter du 1er janvier 2027 ; l’abrogation des circulaires n° 20/13 et n° 21/15 prend effet immédiatement.
Principales exigences :
1) Abrogations
- Circulaire n° 20/13 (externalisation du cloud computing, mettant en œuvre la ligne directrice EIOPA-BoS-20-002) : abrogée avec effet immédiat, les lignes directrices de l’EIOPA sur lesquelles elle se fondait ayant elles-mêmes été abrogées avec effet au 17 janvier 2025.
- Circulaire n° 21/15 (modifiant et complétant la circulaire n° 20/13) : abrogée avec effet immédiat pour la même raison.
2) Modifications apportées à la circulaire n° 22/16
Les principales modifications de fond sont les suivantes :
1) Introduction : un nouveau troisième alinéa est ajouté, reconnaissant explicitement que la directive DORA s’applique depuis le 17 janvier 2025 aux entités soumises à la surveillance de la CAA relevant de son champ d’application, et que les règles de la directive DORA doivent être prises en compte, en particulier pour l’externalisation de fonctions opérationnelles importantes ou critiques.
2) Article 1 (définitions) : clarification indiquant que les accords d’externalisation incluent ceux conclus au sein d’un même groupe lorsque l’accord produit des effets sur l’entité luxembourgeoise ; introduction d’une référence aux bases juridiques et prudentielles.
3) Article 2 (bases juridiques) : quatre nouvelles bases juridiques sont ajoutées à la liste des textes applicables :
- le règlement DORA (UE) 2022/2554 (directement applicable, aucune transposition requise) ;
- le règlement délégué (UE) 2024/1773 (RTS sur les accords contractuels relatifs aux services TIC critiques/importants fournis par des prestataires de services TIC tiers) ;
- Règlement délégué (UE) 2025/532 (normes techniques réglementaires relatives aux éléments permettant de déterminer et d’évaluer les cas de sous-traitance de services TIC soutenant des fonctions critiques ou importantes) ;
- Lettre circulaire n° 25/1 de la CAA relative au règlement DORA (obligations en matière de notification des incidents TIC majeurs et de registre d’informations).
3) Article 7 (obligations d’évaluation) : clarification selon laquelle l’évaluation doit être validée par le responsable de la conformité et/ou un dirigeant habilité dans un délai de deux mois ; référence aux sections D01.X.0040 et D01.X.0070 du registre d’informations (auparavant uniquement D01.X.0040).
4) Article 8 (formulaire de notification) : Ajout d’une septième section au formulaire : D01.X.0070 — Prestataire de services TIC (devoirs de diligence supplémentaires et dispositions contractuelles), imposant aux entreprises d’assurance et de réassurance d’exercer une diligence raisonnable supplémentaire et de veiller à ce que les contrats d’externalisation contiennent des dispositions contractuelles supplémentaires, en particulier lorsque la prestation de services TIC repose sur une chaîne de sous-traitants TIC.
5) Article 9 (déclaration) : les obligations de déclaration prévues par la directive DORA sont explicitement maintenues (« Sans préjudice des obligations de déclaration prévues par la directive DORA »).
Dispositions finales : les modifications introduites par la circulaire n° 26/11 s’appliquent à compter du 1er janvier 2027 ; la circulaire initiale n° 22/16 continue de s’appliquer à compter du 1er novembre 2022 pour les contrats d’externalisation conclus ou modifiés à partir de cette date.
OTHER
LBR publishes a reminder to RCS-Registered Entities to verify and update their registered office address / LBR publie un rappel à l'intention des entités inscrites au RCS afin qu'elles vérifient et mettent à jour l'adresse de leur siège social
![]()
On 7 October 2026, Luxembourg Business Registers (LBR) published a reminder addressed to all entities registered with the Luxembourg Trade and Companies Register (RCS) regarding the accuracy and compliance of their registered office address as entered in the RCS.
The reminder applies to all entities registered with the RCS in Luxembourg, regardless of legal form. No specific entry-into-force date is applicable; the obligation to maintain an accurate registered office address is an existing ongoing requirement.
The LBR sets out two specific expectations:
- Address compliance: The registered office address entered in the RCS must correspond to the information contained in the National Register of Localities and Streets. Entities are invited to verify their address using the consultation tool available at https://caclr.public.lu/caclr-front/ and to update their RCS file where necessary. This update is not subject to publication in the RESA.
- Postal deliverability: The registered office address must be accurate, up to date, and allow for the proper delivery of postal correspondence. The LBR regularly observes that official correspondence cannot be delivered due to the absence of a letterbox or other identifiable means of receipt in the name or trade name of the entity. Registered entities must ensure that a means of receiving mail is available at their registered office address.
Version française
Le 7 octobre 2026, Luxembourg Business Registers (LBR) a publié un rappel adressé à toutes les entités inscrites au Registre du commerce et des sociétés (RCS) du Luxembourg concernant l’exactitude et la conformité de l’adresse de leur siège social telle qu’elle figure au RCS.
Ce rappel s'applique à toutes les entités inscrites au RCS au Luxembourg, quelle que soit leur forme juridique. Aucune date d'entrée en vigueur spécifique n'est prévue ; l'obligation de maintenir une adresse de siège social exacte est une exigence permanente.
Le LBR énonce deux exigences spécifiques :
- Conformité de l’adresse : l’adresse du siège social inscrite au RCS doit correspondre aux informations figurant dans le Registre national des localités et des rues. Les entités sont invitées à vérifier leur adresse à l’aide de l’outil de consultation disponible à l’adresse https://caclr.public.lu/caclr-front/ et à mettre à jour leur dossier RCS si nécessaire. Cette mise à jour ne fait pas l’objet d’une publication au RESA.
- Délivrabilité du courrier : l’adresse du siège social doit être exacte, à jour et permettre la bonne délivrance du courrier. Le LBR constate régulièrement que des courriers officiels ne peuvent être délivrés en raison de l’absence de boîte aux lettres ou d’un autre moyen identifiable de réception au nom ou à la raison sociale de l’entité. Les entités immatriculées doivent s’assurer qu’un moyen de réception du courrier est disponible à l’adresse de leur siège social.
PRUDENTIAL REQUIREMENTS
CSSF publishes final guidance on money market fund (MMF) weekly liquid asset levels / La CSSF publie ses recommandations définitives concernant les niveaux hebdomadaires d'actifs liquides des fonds monétaires (MMF)
![]()
On 30 October 2026, the CSSF published its Final Guidance on Money Market Fund (MMF) Weekly Liquid Asset Levels, following a public consultation that closed on 3 August 2026. The guidance was developed in coordination with the European Commission, the French AMF and the Central Bank of Ireland, and is accompanied by a feedback statement. A three-month implementation period applies.
The guidance builds on the European Commission's 2026 MMF Report (COM(2026) 350 final) and related FAQs published on 11 May 2026, which identified market resilience levels for weekly liquid assets (WLA) capable of serving as supervisory and risk management tools. The CSSF's 2023 and 2026 MMF reports confirmed that MMFs typically operate well above regulatory minimums, but stress testing identified specific WLA thresholds below which heightened scrutiny is warranted.
Scope of application:
Luxembourg-domiciled MMFs and their managers (UCITS management companies and AIFMs) subject to the EU MMF Regulation (MMFR, Regulation (EU) 2017/1131).
Main requirements:
- Market resilience levels (WLA): VNAV MMFs — 20% WLA. Public Debt CNAV and LVNAV MMFs — 40% WLA. These levels are early-warning supervisory indicators, not de facto regulatory minimums; buffers may be used during stress periods without automatic linkage to liquidity management tools (LMTs).
- Stress testing: Market resilience levels must be integrated into stress testing programmes under Article 28 MMFR. If tests reveal a vulnerability, the MMF manager must immediately notify the CSSF and submit a report and action plan per Article 28(4)–(5) MMFR.
- Enhanced vigilance below market resilience levels: When WLA approaches or falls below these thresholds, MMF managers must escalate internally and reinforce decision-making processes.
- Notification obligation: If an MMF falls below market resilience levels for more than 10 business days (notification triggered from day 11 onwards), or if the manager expects a prolonged and/or substantial deviation, the manager must notify the CSSF with explanations and justifications.
- Increased supervisory scrutiny: Triggered by manager notification or CSSF identification. Intensity depends on duration, frequency and justification of deviations. In stressed market conditions, the CSSF may request more frequent data including NAV, net subscriptions, WAM, WAL, daily and weekly liquidity buffers, and CNAV/shadow NAV differences.
Version française
Le 30 octobre 2026, la CSSF a publié ses lignes directrices définitives relatives aux niveaux hebdomadaires d’actifs liquides des fonds monétaires (MMF), à l’issue d’une consultation publique qui s’est achevée le 3 août 2026. Ces lignes directrices ont été élaborées en coordination avec la Commission européenne, l’AMF française et la Banque centrale d’Irlande, et sont accompagnées d’une synthèse des commentaires reçus. Une période de mise en œuvre de trois mois s’applique.
Ces lignes directrices s’appuient sur le rapport 2026 de la Commission européenne sur les fonds monétaires (COM(2026) 350 final) et sur la foire aux questions (FAQ) correspondante publiée le 11 mai 2026, qui ont identifié des niveaux de résilience du marché pour les actifs liquides hebdomadaires (WLA) pouvant servir d’outils de surveillance et de gestion des risques. Les rapports de la CSSF sur les OPCVM monétaires de 2023 et 2026 ont confirmé que les OPCVM monétaires fonctionnent généralement bien au-dessus des minima réglementaires, mais des tests de résistance ont identifié des seuils spécifiques d’actifs liquides hebdomadaires (WLA) en dessous desquels une surveillance accrue est justifiée.
Champ d’application :
Les OPCVM monétaires domiciliés au Luxembourg et leurs gestionnaires (sociétés de gestion d’OPCVM et gestionnaires de FIA) soumis au règlement de l’UE sur les OPCVM monétaires (MMFR, règlement (UE) 2017/1131).
Principales exigences :
- Niveaux de résilience du marché (WLA) : OPCVM monétaires à VNAV — WLA de 20 %. OPCVM monétaires à CNAV et LVNAV investissant en dette publique — WLA de 40 %. Ces niveaux constituent des indicateurs de surveillance d’alerte précoce, et non des minima réglementaires de facto ; des réserves peuvent être utilisées en période de crise sans lien automatique avec les outils de gestion de la liquidité (LMT).
- Tests de résistance : les niveaux de résilience au marché doivent être intégrés dans les programmes de tests de résistance prévus à l’article 28 du MMFR. Si les tests révèlent une vulnérabilité, le gestionnaire du FMM doit immédiatement en informer la CSSF et lui soumettre un rapport ainsi qu’un plan d’action conformément à l’article 28, paragraphes 4 et 5, du MMFR.
- Vigilance accrue en cas de dépassement à la baisse des niveaux de résilience au marché : lorsque le WLA s’approche de ces seuils ou les franchit à la baisse, les gestionnaires de FMM doivent signaler le problème en interne et renforcer les processus décisionnels.
- Obligation de notification : si un OPCVM de marché tombe en dessous des niveaux de résilience du marché pendant plus de 10 jours ouvrables (notification déclenchée à partir du 11e jour), ou si le gestionnaire prévoit un écart prolongé et/ou substantiel, celui-ci doit en informer la CSSF en fournissant des explications et des justifications.
- Renforcement du contrôle prudentiel : déclenché par la notification du gestionnaire ou par la constatation de la CSSF. L’intensité dépend de la durée, de la fréquence et de la justification des écarts. En cas de tensions sur les marchés, la CSSF peut exiger des données plus fréquentes, notamment la valeur liquidative (VL), les souscriptions nettes, la WAM, la WAL, les réserves de liquidité quotidiennes et hebdomadaires, ainsi que les écarts entre la CNAV et la « shadow NAV ».
TAX
AED updates CSSF/ISIN file for FIAR subscription tax declarations / L'AED met à jour le fichier CSSF/ISIN pour les déclarations fiscales relatives à la souscription de parts de fonds d'investissement (FIAR)
![]()
On 12 October 2026, the Luxembourg Administration de l'enregistrement, des domaines et de la TVA (AED) published a notice informing taxable persons that the Excel file containing the identifiers (CSSF/ISIN codes) of reserved alternative investment funds (fonds d'investissement alternatifs réservés — FIARs) has been updated as at 12 October 2026. The update is part of the ongoing process of adapting online declaration forms on MyGuichet.lu in anticipation of the end of the two-year transitional period provided for in AED Circular N° 821 on new subscription tax (taxe d'abonnement) declaration procedures for investment funds (UCIs, SIFs and FIARs).
The notice applies to all taxable persons subject to the subscription tax declaration obligation in Luxembourg in respect of FIARs. It is of direct relevance to FIARs and their administrators, as well as to UCIs, SIFs, and SICARs whose identifiers are published separately on the CSSF website. No specific geographic scope beyond Luxembourg is stated.
Main requirements:
Taxable persons are invited to consult the updated version of the CSSF/ISIN identifiers file and to use the most recent identifiers when preparing their subscription tax declarations.
- The updated file reflects the identifiers applicable as at 12 October 2026.
- Upon expiry of the two-year transitional period (August 2026 per Circular N° 821), the new online declaration forms become mandatory and require additional data fields, including sub-fund identifiers (CSSF codes).
- Taxable persons are reminded that they remain responsible for the accuracy of the data provided in their tax declarations; the AED does not guarantee the accuracy, completeness or currency of the published information.
- Persons identifying irregularities or holding missing ISIN codes are requested to notify the AED at: tabo.cf@en.etat.lu.
- Identifiers for UCIs, SIFs, and SICARs are available directly on the CSSF website.
Practical notes on the file:
Where the launch date of a sub-fund is unknown, a fictional start date of 1 January 1980 is used.
For operational sub-funds, a fictional closing date of 31 December 2500 is used by default; the same default applies where a sub-fund is no longer operational but its closure has not been notified.
Version française
Le 12 octobre 2026, l’Administration de l’enregistrement, des domaines et de la TVA (AED) du Luxembourg a publié un avis informant les assujettis que le fichier Excel contenant les identifiants (codes CSSF/ISIN) des fonds d’investissement alternatifs réservés (FIAR) avait été mis à jour au 12 octobre 2026. Cette mise à jour s'inscrit dans le cadre du processus en cours d'adaptation des formulaires de déclaration en ligne sur MyGuichet.lu, en prévision de la fin de la période transitoire de deux ans prévue par la circulaire n° 821 de l'AED relative aux nouvelles procédures de déclaration de la taxe d'abonnement pour les fonds d'investissement (OPC, SIF et FIAR).
La présente note s'adresse à tous les assujettis soumis à l'obligation de déclaration de la taxe d'abonnement au Luxembourg en ce qui concerne les FIAR. Elle concerne directement les FIAR et leurs administrateurs, ainsi que les OPC, les SIF et les SICAR dont les identifiants sont publiés séparément sur le site Internet de la CSSF. Aucune portée géographique spécifique au-delà du Luxembourg n'est mentionnée.
Principales exigences :
Les assujettis sont invités à consulter la version mise à jour du fichier des identifiants CSSF/ISIN et à utiliser les identifiants les plus récents lors de l'établissement de leurs déclarations de taxe d'abonnement.
- Le fichier mis à jour reflète les identifiants applicables au 12 octobre 2026.
- À l’expiration de la période transitoire de deux ans (août 2026 selon la circulaire n° 821), les nouveaux formulaires de déclaration en ligne deviendront obligatoires et nécessiteront des champs de données supplémentaires, notamment les identifiants des compartiments (codes CSSF).
- Il est rappelé aux assujettis qu’ils restent responsables de l’exactitude des données fournies dans leurs déclarations fiscales ; l’AED ne garantit pas l’exactitude, l’exhaustivité ni l’actualité des informations publiées.
- Les personnes constatant des irrégularités ou disposant de codes ISIN manquants sont priées d’en informer l’AED à l’adresse suivante : tabo.cf@en.etat.lu.
- Les identifiants des OPC, des SIF et des SICAR sont disponibles directement sur le site web de la CSSF.
Remarques pratiques concernant le fichier :
Lorsque la date de lancement d’un compartiment est inconnue, une date de début fictive, le 1er janvier 1980, est utilisée.
Pour les compartiments en activité, une date de clôture fictive au 31 décembre 2500 est utilisée par défaut ; cette valeur par défaut s’applique également lorsqu’un compartiment n’est plus en activité mais que sa clôture n’a pas été notifiée.
MEXICO
FINANCIAL CRIME
Gobierno De Mexico publishes update on the progress of Mexico’s FATF Mutual Evaluation
![]()
On 20 October 2026, the Gobierno De Mexico through the Unidad de Inteligencia Financiera (UIF), published “Comunicado No. 86 – La Secretaría de Hacienda, a través de la UIF, informa sobre el avance de la Evaluación Mutua de México ante el GAFI”, which provides an update on Mexico’s participation in the Fifth Round of Mutual Evaluations conducted by the Financial Action Task Force (FATF/GAFI).
Key Takeaways:
- The publication states that Mexico’s FATF Mutual Evaluation process is in its final stage ahead of working meetings and the FATF Plenary scheduled for 26–30 October 2026.
- The evaluation covers the Mexican State as a whole and assesses compliance with FATF standards and the effectiveness of measures to prevent and combat money laundering and the financing of other illicit activities. The review includes the legal framework, institutional capacities, results achieved by competent authorities, and the performance of financial and non-financial sector participants.
- The publication notes that an on-site visit by the evaluation team took place in March 2026, involving national authorities and private-sector institutions. Mexican authorities have worked jointly to strengthen capabilities and address FATF recommendations.
Mexico will await the FATF’s determination following the October 2026 meetings and plenary, after which further actions will be defined to continue strengthening the national anti-money laundering framework.
NETHERLANDS
CAPITAL MARKETS
Overheid publishes advice on the 2026 MiFID II and MiFIR Review Implementation Decree
![]()
On 5 October 2026, the Overheid published its advice and the further report on the 2026 MiFID II and MiFIR Review Implementation Decree, which implements Directive (EU) 2024/790 and gives effect to Regulation (EU) 2024/791 through amendments to Dutch financial-markets legislation. The Council of State had no comments on the draft decree and advised its adoption.
Key takeaways:
- The decree amends the Financial Sector Administrative Fines Decree, the Wft EU Regulations Decree and the Wft Regulated Markets Decree. It updates provisions enabling the AFM to enforce relevant MiFID II/MiFIR requirements through administrative fines or orders subject to periodic penalty payments.
- For regulated markets, the decree adjusts parameters used to temporarily halt or restrict trading, including consideration of liquidity across categories and subcategories of assets and the prevention of significant disruption to the orderly functioning of the market.
- The explanatory memorandum states that the decree is expected to have no or very limited additional regulatory burden, as several amendments concern enforcement and technical implementation rather than new substantive requirements.
The decree is intended to enter into force as far as possible at the same time as the related MiFID II implementation law; the precise commencement is to be determined by Royal Decree.
Overheid publishes Decree of 19 October 2026 implementing the ESAP
![]()
On 29 October 2026, the Overheid published the Decree implementing the European Single Access Point, which implements remaining provisions of Directive (EU) 2023/2864 by amending several Dutch financial-sector decrees to facilitate the submission of already-public information to the European Single Access Point (ESAP).
Key Requirements:
- Providers of units in UCITS must, when making the key information document or key investor information available on their website, simultaneously provide it to the Netherlands Authority for the Financial Markets (AFM) for ESAP. Submissions must include specified metadata and meet data-extractable or, where required, machine-readable format requirements.
- The Decree also establishes ESAP submission requirements relating to public takeover bids and requires De Nederlandsche Bank (DNB) to transmit information on its assessments of the systemic importance of Dutch banking parent undertakings. The explanatory memorandum stresses that ESAP does not create additional underlying reporting information requirements, as the relevant information is already required to be public.
- The Decree introduces enforcement provisions allowing AFM or DNB, where applicable, to impose a periodic penalty payment or category 1 administrative fine for failure to submit required ESAP information or comply with the prescribed requirements.
The measures are phased: certain provisions apply from the day after publication, the UCITS-related requirements apply from 10 January 2028, and most remaining provisions apply from 10 January 2030.
Overheid publishes the 2026 Amendment Decree on EU Regulations under the Financial Supervision Act
![]()
On 15 October 2026, the Overheid published the 2026 Amendment Decree on EU Regulations under the Financial Supervision Act, which implements aspects of the ESAP Regulation (EU) 2023/2869, ESG Ratings Regulation (EU) 2024/3005 and the Benchmark Regulation amendment (EU) 2025/914, while also addressing MiCAR enforcement and reliability assessments under several EU financial-market regulations.
Key Requirements:
- For ESAP, the Decree updates the Dutch enforcement framework for information that must be submitted to collecting bodies and designates the AFM as collecting body where required. The affected frameworks include MAR, PRIIPs, SFTR, BMR, Prospectus Regulation, PEPP, SFDR, MiCAR and the European Green Bond Regulation.
- For ESG ratings, the AFM is designated as the Dutch competent authority. For benchmarks, the Decree implements the amended BMR enforcement provisions, including requirements concerning benchmark contributors and information submitted to the AFM.
- The Decree also specifies that repeated MiCAR infringements by crypto-asset service providers can result in a management ban of up to 10 years, and relocates reliability-assessment rules for persons under several EU Regulations to the relevant annexes of the Dutch implementing decree.
The Decree generally enters into force the day after publication, while specified ESAP provisions take effect on 10 January 2028 or 10 January 2030.
SUSTAINABILITY
AFM publishes communication calling on financial firms to align sustainability claims with new European rules
![]()
On 9 October 2026, the AFM published Align your sustainability claims with new European rules, which reminds financial firms that sustainability claims and marketing communications towards consumers must comply with the Empowering Consumers for the Green Transition Directive (ECGT) requirements.
Key takeaways:
- The rules apply to commercial communications towards consumers concerning financial services and products. The publication identifies banks, insurers, investment firms, investment institutions, advisers, intermediaries, credit providers, crowdfunding service providers and crypto service providers among the firms concerned. They may affect claims about financial products, marketing of sustainable funds and firms' own sustainability claims.
- Sustainability claims must be specific, verifiable and well-founded. Generic environmental claims are restricted, claims based solely on carbon offsetting are curtailed, and sustainability labels must be based on a reliable certification system or public scheme. Future-oriented claims, such as climate or net-zero targets, require clear, objective and verifiable plans, measurable targets, timelines and monitoring.
- The AFM calls on supervised firms to inventory their sustainability claims, labels and other sustainability communications, assess them against the ECGT and amend them where necessary.
The Dutch implementing legislation entered into force on 16 July 2026; market participants must already comply and AFM enforcement is already possible.
SPAIN
PRUDENTIAL REQUIREMENTS
Banco de España publishes Circular 1/2026 on the Central Credit Register
![]()
On 30 October 2026, the Banco de España (BdE) published Circular 1/2026, of 21 October, on the Central Credit Register (CIR), which consolidates in a single instrument the rules governing the CIR and introduces targeted changes to credit-risk reporting requirements.
Key Takeaways:
- The Circular applies to reporting entities including credit institutions, Spanish branches of foreign credit institutions, foreign credit institutions operating in Spain under the freedom to provide services, financial credit establishments, and certain payment institutions and electronic-money institutions that carry out specified credit activities. Spanish institutions generally report their entire business, while simplified regimes apply to certain foreign branches and cross-border providers.
- CIR reporting is generally performed transaction by transaction. Reportable risks include loans, debt securities, financial guarantees, loan commitments, other credit-risk commitments and securities lending. The Circular sets out detailed reporting modules covering counterparties, operations, direct and indirect risks, collateral, interest rates, transfers/securitisations and complementary prudential information.
- The exemption threshold for individual reporting of certain low-value operations is reduced from €3,000 to €1,000. The €3,000 transitional threshold applies until 1 January 2027. The Circular also clarifies reporting for entities operating in Spain under the freedom to provide services and simplifies certain reporting processes.
The Circular enters into force 20 days after publication in the BOE and repeals Banco de España Circular 1/2013.
BOE publishes Royal Decree 813/2026 updating the financial-sector regulatory framework
![]()
On 8 October 2026, the BOE published Royal Decree 813/2026 of 7 October, which amends several financial-sector regulations to update Spain’s AML/CFT framework, align prudential and investment-services rules with EU requirements, and adjust deposit guarantee, issuer transparency and securities-market provisions.
Key requirements:
- AML/CFT: the decree updates customer identification and due diligence, including digital identification and non-face-to-face relationships; requires consideration of suspicious reporting when CDD cannot be completed; extends internal policies to sanctions and financial countermeasures; and expands the information that must feed into firms’ documented AML/CFT risk assessments.
- Banking and investment services: it adjusts deposit-guarantee contributions, supervisory cooperation for banking groups, resolution-fund contributions and resolution-group consolidation. It also changes rules for investment firms, including CNMV powers concerning governance and consolidated supervision.
- Capital markets: the decree changes issuer transparency thresholds and enables a Spanish CSD to maintain a technical account for securities deposited with a CSD outside the EU, facilitating simultaneous trading abroad while maintaining the principal register in Spain.
The Royal Decree enters into force 20 days after its publication, while specified electronic-identification provisions have an 18-month transitional period.
SUSTAINABILITY
CNMV and ICAC publish new communication providing guidance on sustainability reporting pending CSRD transposition in Spain
![]()
On 20 October 2026, the CNMV and the Institute of Accounting and Auditing (ICAC) published their third joint communication on sustainability reporting pending the transposition of the Corporate Sustainability Reporting Directive (CSRD) into Spanish law, providing recommendations for Spanish entities preparing their 2026 sustainability information.
Key Takeaways:
- The CNMV and ICAC recommend that Spanish entities subject to Law 11/2018 with more than 1,000 employees prepare their sustainability report for financial year 2026 in accordance with the European Sustainability Reporting Standards (ESRS), using one of the alternatives provided under the delegated regulation publishing the Set 2 ESRS. The objective is to ensure that their sustainability information is comparable with that provided by other EU issuers.
- For other entities subject to Law 11/2018, the authorities recommend assessing whether it is appropriate to apply the ESRS or the voluntary standard. The CNMV will accept reporting prepared under ESRS provided that it also complies with Law 11/2018.
- Regarding independent assurance of sustainability information, the communication recommends that assurance providers consider recent national and international developments, specifically the ICAC's draft assurance technical standard, the guidelines published by COESA, and ISSA 5000.
The communication is intended to guide 2026 sustainability reporting while the CSRD remains pending transposition into Spanish law.
SWEDEN
CAPITAL MARKETS
FI publishes news on the the framework of rules for T+1
![]()
On 22 October 2026, Finansinspektionen published news on T+1 which announces that the full EU regulatory framework for the move to T+1 securities settlement is now in place and urges stakeholders to complete operational adjustments and testing.
The publication states that the transition concerns settlement of securities trades in one day (T+1) instead of two days (T+2). According to the text, the final elements of the framework are ESMA’s final guidelines on standard procedures and protocols for communications between investment institutions and their professional clients, together with revised regulatory technical standards on settlement discipline.
The publication refers to investment institutions and their professional clients. It also addresses Swedish actors more generally and refers to all stakeholders involved in the T+1 transition. The geographic context is EU-wide for the regulatory framework, with specific emphasis on Swedish market participants’ preparations.
Main requirements:
The publication highlights that, from 7 December 2026, investment institutions and their clients must comply with new requirements for allocation and confirmation. These requirements concern the use of electronic standardised communication channels and international messaging standards, as well as machine-readable communication methods, except in the event of technical breakdowns. The text states that the updated ESMA guidelines provide more detailed answers on how firms should comply with the requirements included in the amended technical standards. The publication also stresses that standardisation is intended to facilitate the T+1 transition and that Swedish actors need to ensure standardised formats are in place before 7 December.
Timeline:
The first deadline identified is 7 December 2026, when the new allocation and confirmation requirements apply. The publication states that almost one year remains until the full transition to T+1 settlement is completed. It also notes that, in 2027, market participants will need to participate in testing with others.
FINANCIAL CRIME
FI publishes consultation responses on the memorandum on the European Union anti-money laundering package
![]()
On 14 October 2026, Finansinspektionen published consultation responses on the memorandum concerning the European Union anti-money laundering package, which set out its position on proposed national legislative measures linked to the new European Union anti-money laundering framework.
Key takeaways:
The publication states that Finansinspektionen mainly supports the memorandum’s proposals. However, it expressly rejects the proposal intended to include provisions in the proposed new Anti-Money Laundering Act on intervention against obliged entities that breach their obligations under the anti-money laundering rules, where those provisions would also apply to obliged entities whose operations are governed by other financial market business legislation.
According to the publication, Finansinspektionen also proposes certain additions and clarifications to the proposals for the purposes of the continued legislative process. The news item does not set out those additions and clarifications in detail, but indicates that they form part of Finansinspektionen’s consultation input on the memorandum.
The publication further explains that Finansinspektionen has submitted two consultation responses in relation to the memorandum. It specifies that the consultation response concerning the proposals in section 9 of the memorandum was decided by Finansinspektionen’s Board of Directors.
The publication provides links to the following documents:
- consultation response on the memorandum on the European Union money laundering package – part 1;
- referral of the memorandum on the European Union money laundering package issued by the Government Offices;
- consultation response on the memorandum on the European Union money laundering package – part 2.
Overall, the publication is a statement of supervisory views submitted in the context of a national legislative consultation on the implementation of the European Union anti-money laundering package. It signals general support for the memorandum while identifying a specific objection regarding intervention provisions applicable to obliged entities subject to other financial market legislation, and notes that further clarifications have been suggested for future legislative work.
FI publishes national risk assessment on proliferation financing and sanctions evasion in the Swedish financial system
![]()
On 19 February 2026, the Finansinspektionen (FI) mandated ten authorities to produce and publish National risk assessment regarding the financing of the proliferation of weapons of mass destruction, which assesses Sweden’s risks that UN‑mandated targeted financial sanctions related to proliferation financing are not implemented or are circumvented.
The report, coordinated by Polismyndigheten and backed by all authorities in the Sanctions Cooperation Council, responds to FATF Recommendation 1 and is limited to UN Security Council resolutions imposing targeted financial sanctions on Iran and North Korea (FATF Recommendation 7). It covers January 2021–March 2026 and analyses threats, vulnerabilities, consequences and relative risk levels, without proposing risk‑mitigating measures.
The assessment concerns implementation and circumvention risks of UN‑based targeted financial sanctions as implemented in the EU (Regulation (EU) 267/2012 on Iran; Regulation (EU) 2017/1509 on DPRK) and in Sweden via the International Sanctions Act (lagen 2025:327 om internationella sanktioner). It focuses on Iran and North Korea, but uses EU sanctions on Russia as an illustrative sanktionsregim. It covers both financial and non‑financial sectors and Swedish export/industrial context.
Main findings / risk areas:
The highest relative risks are identified in:
- Illegal financial activity (“underground banking”), including hawala networks, cash and gold flows, and illegal crypto exchanges.
- Financing via crypto‑assets, including large‑scale use of stablecoins by Iranian state‑linked actors and cyber‑enabled crypto thefts by North Korea.
Other significant risks include: failures to identify assets and companies owned/controlled by listed persons; concealment via complex corporate structures and multi‑step transaction chains (including correspondent banking and alternative payment infrastructures like SPFS and CIPS); and financing via sale of services/IT labour (notably North Korean IT workers).
The lowest relative risk (yet non‑negligible) is assessed for financing via sale of goods, mitigated by export control and sector oversight.
FI publishes news item on EBA's new questions for periodic reporting on money laundering
![]()
On 13 October 2026, Finansinspektionen published a news item on new questions for periodic anti-money laundering reporting, which explains that the European Banking Authority (EBA) has published information on the questions to be answered in the next periodic report on money laundering in the first quarter of 2027.
The publication states that the relevant changes are included in version 4.4 Phase-1 of the EBA Technical Package for Reporting and Disclosure. According to Finansinspektionen, this package contains important changes for firms subject to periodic anti-money laundering reporting because it now provides greater clarity on the issues and data points that will be included in the reporting exercise.
Finansinspektionen indicates that affected companies should review the published material in order to assess what changes may be needed in their operations and systems to produce the required data. The publication does not set out detailed technical fields itself, but highlights the operational implications of the newly specified reporting content.
The publication includes the following main implementation points:
- Scope of change: new questions and clearer specification of issues and data points for periodic anti-money laundering reporting.
- Reporting period: unchanged, running from 1 January to 31 March.
- Entry into force: the new reporting will apply from 1 January 2027.
- Reference date: the information to be reported must relate to the balance sheet date of 31 December 2026.
- Submission channel: reporting must continue to be made through Finansinspektionen’s reporting portal, Fidac.
- Entities under direct Anti-Money Laundering Authority (AMLA) supervision: firms that qualify for direct supervision by the Anti-Money Laundering Authority (AMLA) must report in accordance with the EBA taxonomy, and Finansinspektionen states that it will contact these firms separately.
The publication also refers readers to the EBA final technical package for release 4.4 of its reporting and Pillar 3 disclosure framework, as well as to a previous Finansinspektionen communication of 26 June 2026 on extensive changes in periodic money laundering reporting.
GOVERNANCE & ORGANISATION
FI publishes in-depth analysis of fund managers’ risk management function
![]()
On 23 October 2026, Finansinspektionen published an in-depth analysis of how fund management companies and managers of alternative investment funds comply with the rules applicable to the risk management function and whether that function is efficient and appropriate.
The publication states that the risk management function plays a central role in fund managers’ operations. According to the text, the function is to identify, measure, manage and monitor the risks to which the funds and operations are exposed. It must also ensure that risks are within defined limits and consistent with the interests of unitholders. The publication explains that an effective and independent risk management function is therefore important for investor protection and confidence in the fund market.
Main requirements:
The publication states that FI’s analysis will focus, among other things, on the resources, competence, authority and independence of the risk management function. FI will also review how the risk management function identifies, measures, manages and monitors risks. In addition, the analysis will examine reporting to, and cooperation with, management and the board of directors. The publication presents these as the principal areas to be assessed in the in-depth review.
FI publishes results of an in-depth analysis of fund managers’ compliance and internal audit functions
![]()
On 23 October 2026, Finansinspektionen published the results of an in-depth analysis of compliance and internal audit functions at seven Swedish fund managers.
The publication states that compliance and internal audit functions are important to avoid investors being disadvantaged and to safeguard financial stability. These functions are intended to ensure that internal control mechanisms are in place to monitor, identify, measure and limit the risks of fund managers not complying with applicable rules. The analysis was part of a Common Supervisory Action coordinated by ESMA and was carried out in autumn 2025.
The analysis covered seven Swedish fund managers. The publication states that both fund management companies and alternative investment fund managers were included. FI reviewed questions addressed to the firms and examined internal rules, procedures and reports concerning the work of the control functions. The publication concerns compliance and internal audit functions, including where these functions are outsourced.
Main findings:
FI states that, at an overall level, the rules are followed in these control functions. According to the publication, all fund managers worked on a risk-based basis using annual risk assessments, with clear processes, a high degree of independence, and sufficient competence and authority. However, FI observed that several fund managers had allocated limited human resources to the internal control functions, creating a risk that the quality of the controls may be reduced. This was highlighted particularly for managers outsourcing control functions to an external party. The publication notes that outsourced control functions were rarely on site with fund managers and were less involved in providing advice and support, for example in the product approval process. Where outsourcing occurred within the same group, FI sometimes observed that the focus was on group-wide risks rather than the fund manager’s specific risks. FI also states that more detailed annual reports are preferable to summary presentations.
OTHER
FI publishes Joint statement on strengthened Nordic supervisory cooperation
![]()
On 21 October 2026, Finansinspektionen published the Joint statement on strengthened Nordic supervisory cooperation, which sets out a letter of intent for closer supervisory cooperation among the Nordic financial supervisory authorities.
The statement records that, at their meeting in Copenhagen on 27–28 August 2026, the Directors General of the financial supervisory authorities of Denmark, Finland, Iceland, Norway and Sweden agreed to use Nordic cooperation more systematically as a practical tool to strengthen supervisory effectiveness and support further integration of Nordic financial markets. The publication states that Nordic financial markets are closely integrated, with significant cross-border activity and shared supervisory challenges.
The publication concerns cooperation between the Nordic financial supervisory authorities. It addresses supervision of firms, activities and risks with significant cross-border relevance in Nordic financial markets. The statement refers broadly to markets, firms and risks that are already highly cross-border. It does not specify legally binding application to particular categories of supervised entities.
Main requirements:
The authorities commit to deliver concrete progress in two priority cooperation areas before their next meeting in August 2027.
- First, supervisors will compare national supervisory practices under the Market Abuse Regulation and identify areas where practices could be further aligned, with the aim of supporting more consistent and predictable supervisory outcomes across integrated Nordic capital markets.
- Second, supervisors will work together on the implementation and application of the new Payment Services Directive and Regulation, including relevant Level 2 and Level 3 workstreams. As part of this, the authorities will identify one or more areas where a common Nordic supervisory approach or guidance could be developed instead of separate national approaches, where possible and appropriate.
The authorities aim to deliver concrete progress ahead of their next meeting in Stockholm in August 2027.
PRUDENTIAL REQUIREMENTS
FI publishes news item on EBA's new reporting and disclosure package
![]()
On 12 October 2026, Finansinspektionen published news on EBA's new reporting and disclosure package, which announces that the EBA has published version 4.4 Phase-1 of the technical package for reporting and Pillar 3 disclosure framework. It highlights the main elements included in the package and provides the first reference dates for certain changes.
The publication concerns the EBA’s reporting and disclosure framework. The changes mentioned relate to:
- IFRS18 (FINREP)
- AMLA Risk Assessment and AMLA Eligibility, based on an agreement between the EBA and AMLA
- Technical changes related to Resolution Planning, MREL decisions, etc.
- Various changes linked to the rules on disclosure
The first reference date for IFRS18 is 31 March 2027. More information on the application of the IFRS18 module will be available shortly in a special news item.
The first reference date for changes to Resolution Planning is 31 December 2026.
The first reference date for AMLA reporting is 31 December 2026.
Submission dates for each report will be stated in FI's reporting portal Fidac.
SWITZERLAND
FINANCIAL CRIME
Conseil Fédéral publishes updated national risk assessment on money laundering and terrorist financing / Le Conseil fédéral publie une évaluation nationale actualisée des risques liés au blanchiment d'argent et au financement du terrorisme
![]()
On 14 October 2026, Conseil Fédéral published Switzerland's 2026 National Risk Assessment (NRA 26) on the risks of money laundering and terrorist financing. This is the third NRA published by the CGMF, building on the 2015 NRA and its 2021 update, and incorporates sectoral risk assessments published since 2015. It is based on MROS suspicious activity report data, criminal proceedings, mutual legal assistance findings, supervisory data, and six expert panels. The NRA 26 serves as the official national risk baseline for Switzerland's AML/CFT framework and underpins the Federal Council's National Strategy on Combating Money Laundering and Terrorist Financing adopted on 20 March 2026.
The NRA covers 25 sectors across the Swiss financial system and non-financial professions. It is addressed to federal authorities, cantonal and municipal authorities, financial intermediaries, dealers, advisors, SROs, supervisory organisations (SOs), and foundation supervisory bodies. It also serves as Switzerland's communication to international partners including the FATF and the Egmont Group. Proliferation financing risks are explicitly excluded from scope, having been addressed in a separate 2024 sectoral assessment.
1) Key findings — Threats:
- Organised crime: Transnational criminal networks remain the primary ML threat. Drug trafficking, human trafficking, illegal gambling, fraud, and property offences are the principal predicate offences. Infiltration of legitimate economic structures is an increasing trend. Fraud (Art. 146/147 SCC) accounts for 61% of all MROS suspicious activity reports (2020–2025), rising from 3,155 reports in 2020 to 13,625 in 2025. Digital fraud (cyber fraud, investment fraud, BEC, romance scams) and money mule schemes are growing rapidly.
- Corruption: 4.2% of all suspicious activity reports (2020–2025). Primarily international in nature (layering and integration phases). Significant involvement of legal entities (66%) and cross-border transactions (68%).
Tax crime: 2.3% of all suspicious activity reports; marked increase in 2025. High transaction volumes; frequently linked to fraud and misappropriation.
- Terrorist financing: Currently limited in scope (0.8% of all reports, 523 reports over 2020–2025). Primary threats come from lone actors, small cells, and foreign terrorist fighters with modest, legitimately sourced funding. Growing use of VAs and informal transfer services (Hawala) could increase TF risk.
2) Key findings — Vulnerabilities:
- International appeal of the Swiss financial centre (CHF 2,427bn in offshore private assets managed cross-border).
Cash intensity in certain sectors, despite declining use overall (now 23% of payments).
- Digital technology risks: deepfakes, AI-enabled fraud, cloud dependency, inadequate governance of new technologies.
Informal money and value transfer services (Hawala and similar).
3) Sector residual risk ratings:
High residual risk: Wealth management banks; Other banks (including crypto banks); Fintech institutes (Art. 1b BankA); Trustees; Money transmitters; Virtual asset service providers (VASPs); Legal advisory professions and fiduciary activities; Real estate.
Medium residual risk: Retail banks; Commercial banks; Securities firms; DLT trading facilities; Asset managers; Means of payment and payment systems; Money and currency exchange; Brick-and-mortar sports betting; Precious metals trading; Non-profit organisations; Art and cultural property trading.
Low residual risk: Life insurance companies; Fund management companies; Managers of collective assets; Credit and leasing; Casinos; Authorised large-scale gaming market.
4) Interdepartmental Coordination Group on Combating Money Laundering, Terrorist Financing and Proliferation Financing (CGMF) recommendations:
- Ensure sufficient qualified resources for federal enforcement and supervisory authorities.
- Maintain and intensify institutional exchange forums (public-public, public-private, private-private), including expanding Swiss FIPPP.
- Progress the organised crime legislative package and submit it to Parliament as soon as possible.
- Consolidate and expand data infrastructure for evidence-based risk assessment.
- Continuously review the effectiveness of the newly introduced transparency register and advisor regulations (in force 1 October 2026).
- Evaluate the design of the MROS reporting system in light of evolving risks and volume growth (5,334 reports in 2020 to 21,087 in 2025).
- Continue expanding FINMA's supervisory toolkit to enable effective, proportionate, and dissuasive sanctions.
- Review the Precious Metals Control Act and Ordinance for efficiency and effectiveness.
Version française
Le 14 octobre 2026, le Conseil fédéral a publié l’Évaluation nationale des risques 2026 (ENR 26) de la Suisse concernant les risques liés au blanchiment d’argent et au financement du terrorisme. Il s’agit de la troisième ENR publiée par le CGMF, qui s’appuie sur l’ENR 2015 et sa mise à jour de 2021, et intègre les évaluations sectorielles des risques publiées depuis 2015. Elle s'appuie sur les données issues des communications d'opérations suspectes du MROS, les procédures pénales, les conclusions issues de l'entraide judiciaire, les données de surveillance et les travaux de six groupes d'experts. L'Évaluation nationale des risques 26 sert de référence nationale officielle en matière de risques pour le cadre suisse de lutte contre le blanchiment d'argent et le financement du terrorisme (AML/CFT) et sous-tend la Stratégie nationale de lutte contre le blanchiment d'argent et le financement du terrorisme du Conseil fédéral, adoptée le 20 mars 2026.
L’Évaluation nationale des risques (NRA) couvre 25 secteurs du système financier suisse et des professions non financières. Elle s’adresse aux autorités fédérales, cantonales et communales, aux intermédiaires financiers, aux négociants, aux conseillers, aux organismes d’autorégulation (OAR), aux organismes de surveillance (OS) et aux organes de surveillance des fondations. Elle sert également de communication de la Suisse à ses partenaires internationaux, notamment le GAFI et le Groupe Egmont. Les risques liés au financement de la prolifération sont explicitement exclus du champ d’application, ceux-ci ayant fait l’objet d’une évaluation sectorielle distincte en 2024.
1) Principales conclusions — Menaces :
- Criminalité organisée : les réseaux criminels transnationaux restent la principale menace en matière de blanchiment d’argent. Le trafic de stupéfiants, la traite des êtres humains, les jeux d’argent illégaux, la fraude et les infractions contre le patrimoine constituent les principales infractions sources. L’infiltration des structures économiques légitimes est une tendance à la hausse. La fraude (art. 146/147 du Code pénal suisse) représente 61 % de l’ensemble des déclarations d’opérations suspectes du MROS (2020–2025), passant de 3 155 déclarations en 2020 à 13 625 en 2025. La fraude numérique (cyberfraude, fraude à l’investissement, BEC, escroqueries sentimentales) et les stratagèmes de «mules financières» connaissent une croissance rapide.
- Corruption : 4,2 % de l’ensemble des communications de soupçons (2020–2025). De nature principalement internationale (phases de stratification et d’intégration). Implication significative de personnes morales (66 %) et de transactions transfrontalières (68 %).
Criminalité fiscale : 2,3 % de l’ensemble des communications de soupçons ; augmentation marquée en 2025. Volumes de transactions élevés ; fréquemment liés à la fraude et au détournement de fonds.
- Financement du terrorisme : portée actuellement limitée (0,8 % de l’ensemble des signalements, 523 signalements sur la période 2020–2025). Les principales menaces proviennent d’acteurs isolés, de petites cellules et de combattants terroristes étrangers disposant de fonds modestes provenant de sources légitimes. L’utilisation croissante des agents virtuels (VA) et des services de transfert informels (Hawala) pourrait accroître le risque de financement du terrorisme.
2) Principales conclusions — Vulnérabilités :
- Attrait international de la place financière suisse (2 427 milliards de CHF d’actifs privés offshore gérés au niveau transfrontalier).
Recours important aux espèces dans certains secteurs, malgré une baisse globale de leur utilisation (actuellement 23 % des paiements).
- Risques liés aux technologies numériques : deepfakes, fraudes basées sur l’IA, dépendance au cloud, gouvernance insuffisante des nouvelles technologies.
Services informels de transfert d’argent et de valeur (Hawala et similaires).
3) Notations du risque résiduel par secteur :
Risque résiduel élevé : banques de gestion de fortune ; autres banques (y compris les banques de cryptomonnaies) ; établissements de fintech (art. 1b de la Loi sur les banques) ; fiduciaires ; opérateurs de transfert de fonds ; prestataires de services d’actifs virtuels (VASP) ; professions de conseil juridique et activités fiduciaires ; immobilier.
Risque résiduel moyen : banques de détail ; banques commerciales ; sociétés de valeurs mobilières ; plateformes de négociation DLT ; gestionnaires d’actifs ; moyens de paiement et systèmes de paiement ; change de devises ; paris sportifs en agence ; négoce de métaux précieux ; organisations à but non lucratif ; négoce d’œuvres d’art et de biens culturels.
Risque résiduel faible : compagnies d’assurance-vie ; sociétés de gestion de fonds ; gestionnaires d’actifs collectifs ; crédit et crédit-bail ; casinos ; marché autorisé des jeux de hasard à grande échelle.
4) Recommandations du Groupe de coordination interdépartemental pour la lutte contre le blanchiment d’argent, le financement du terrorisme et le financement de la prolifération (CGMF) :
- Garantir des ressources qualifiées suffisantes pour les autorités fédérales chargées de l’application de la loi et de la surveillance.
- Maintenir et intensifier les forums d’échange institutionnels (public-public, public-privé, privé-privé), notamment en développant le FIPPP suisse.
- Faire avancer le paquet législatif sur le crime organisé et le soumettre au Parlement dès que possible.
- Consolider et étendre l’infrastructure de données pour une évaluation des risques fondée sur des preuves.
- Évaluer en permanence l’efficacité du registre de transparence et de la réglementation relative aux conseillers récemment mis en place (en vigueur le 1er octobre 2026).
- Évaluer la conception du système de signalement du MROS à la lumière de l’évolution des risques et de l’augmentation du volume des signalements (de 5 334 en 2020 à 21 087 en 2025).
- Poursuivre l’élargissement de la panoplie d’outils de surveillance de la FINMA afin de permettre l’application de sanctions efficaces, proportionnées et dissuasives.
- Réexaminer la loi et l’ordonnance sur le contrôle des métaux précieux afin d’en garantir l’efficacité et l’efficience.
GOVERNANCE & ORGANISATION
Swiss official journal publishes an amendment to the Ordinance on the Swiss National Bank Act / Le Journal officiel suisse publie une modification de l'ordonnance relative à la loi sur la Banque nationale suisse
![]()
On 13 October 2026, the Swiss official journal published an amendment to the Ordinance on the Swiss National Bank Act (Ordinance of the National Bank, OBN, RS 951.131), entering into force on 1 November 2026. The amendment updates several existing statistical surveys and introduces two new surveys: a granular loan survey conducted jointly with FINMA, and a daily ATM cash transactions survey. It also makes threshold adjustments to multiple existing surveys.
The amendment applies to Swiss banks, financial groups, and ATM operators subject to SNB statistical reporting obligations. It has no direct applicability to EU- or Luxembourg-supervised entities absent a Swiss regulatory nexus.
Main requirements:
1) New survey 1 — Granular loan survey (new, inserted after the "Detailed Year-End Statistics" survey):
- Subject: Individual-level data on loans granted by Swiss-domiciled entities, covering on-balance-sheet items ("Receivables from clients" and "Mortgage receivables") and off-balance-sheet items; includes information on loans, counterparties, collateral, capital coverage, and amortisations.
- Reporting entities: Banks and financial groups domiciled in Switzerland with resident balance sheet items ("Receivables from clients" + "Mortgage receivables") exceeding CHF 4 billion. Exemptions: banks authorised under the small banks regime (Art. 47a of the Capital Adequacy Ordinance) and Category 5 banks. For financial groups, the highest Swiss prudentially supervised entity reports for all Swiss group banks including small banks and Category 5 banks; groups composed exclusively of small banks or Category 5 banks are exempt.
- Consolidation level: Branch level.
- Frequency: Quarterly.
- Submission deadline: 40 days from reference date.
- Governance: Conducted jointly with FINMA.
2) New survey 2 — Cash Transactions at Access Points (new, inserted after the "Client Payments" survey):
- Subject: Daily data on cash deposits and withdrawals at ATMs located in the Swiss franc monetary area; covers transaction data, ATM details, operator/network information, and card type used.
- Reporting entities: Operators of ATMs active in the Swiss franc monetary area; network operators with annual transactions exceeding CHF 2 billion. Where an ATM belongs to a network, the network operator reports first.
- Consolidation level: Not applicable.
- Frequency: Daily.
- Submission deadline: 1 day from reference date.
3) Threshold adjustments to existing surveys (summary):
- Monthly detailed balance sheet survey: reporting threshold raised.
- Monetary statistics balance sheet survey: threshold for M3-qualifying items updated to CHF 4.4 billion.
Balance sheet items by interest rate: updated thresholds (CHF deposits >CHF 5.7bn or CHF interbank liabilities >CHF 1.3bn).
- BIS Consolidated Banking Statistics: updated criteria, including group entity rules.
- BIS Locational Banking Statistics (euro-currency statistics): reporting threshold updated to CHF 1.7 billion.
- BIS OTC Derivatives Statistics: semiannual threshold CHF 2,500 billion; triennial threshold CHF 8 billion (volume) or CHF 30 billion (outstanding).
- Current account balance survey: renamed "Survey on the Current Account Balance"; threshold CHF 100,000 for transactions with non-resident counterparties.
- Foreign financial relations survey: updated criteria (financial asset stocks >CHF 10m; financial transactions >CHF 1m; foreign subsidiary revenues >CHF 1m).
Version française
Le 13 octobre 2026, le Journal officiel suisse a publié une modification de l’ordonnance relative à la loi sur la Banque nationale suisse (ordonnance sur la Banque nationale, OBN, RS 951.131), qui entrera en vigueur le 1er novembre 2026. Cette modification actualise plusieurs enquêtes statistiques existantes et introduit deux nouvelles enquêtes : une enquête granulaire sur les crédits, menée conjointement avec la FINMA, et une enquête quotidienne sur les transactions en espèces aux distributeurs automatiques. Elle prévoit également des ajustements des seuils pour plusieurs enquêtes existantes.
La modification s'applique aux banques suisses, aux groupes financiers et aux exploitants de distributeurs automatiques de billets soumis aux obligations de déclaration statistique de la BNS. Elle ne s'applique pas directement aux entités soumises à la surveillance de l'UE ou du Luxembourg en l'absence de lien réglementaire avec la Suisse.
Principales exigences :
1) Nouvelle enquête n° 1 — Enquête granulaire sur les prêts (nouvelle, insérée après l'enquête « Statistiques détaillées de fin d'année ») :
- Objet : données au niveau individuel sur les prêts accordés par des entités domiciliées en Suisse, couvrant les postes du bilan (« Créances sur la clientèle » et « Créances hypothécaires ») et les postes hors bilan ; comprend des informations sur les prêts, les contreparties, les garanties, la couverture en fonds propres et les amortissements.
- Entités déclarantes : banques et groupes financiers domiciliés en Suisse dont les postes de bilan relatifs aux résidents (« Créances sur la clientèle » + « Créances hypothécaires ») dépassent 4 milliards de CHF. Exemptions : banques autorisées au titre du régime des petites banques (art. 47a de l’ordonnance sur l’adéquation des fonds propres) et banques de catégorie 5. Pour les groupes financiers, c’est l’entité suisse la plus importante soumise à la surveillance prudentielle qui effectue la déclaration pour l’ensemble des banques suisses du groupe, y compris les petites banques et les banques de catégorie 5 ; les groupes composés exclusivement de petites banques ou de banques de catégorie 5 sont exemptés.
- Niveau de consolidation : niveau des succursales.
- Fréquence : trimestrielle.
- Délai de transmission : 40 jours à compter de la date de référence.
- Gouvernance : menée conjointement avec la FINMA.
2) Nouvelle enquête 2 — Transactions en espèces aux points d’accès (nouvelle, insérée après l’enquête « Paiements des clients ») :
- Objet : données quotidiennes sur les dépôts et retraits d’espèces aux distributeurs automatiques situés dans l’espace monétaire du franc suisse ; couvre les données de transaction, les détails des distributeurs, les informations sur l’opérateur/le réseau et le type de carte utilisé.
- Entités déclarantes : opérateurs de distributeurs automatiques actifs dans la zone monétaire du franc suisse ; opérateurs de réseaux dont le volume annuel de transactions dépasse 2 milliards de CHF. Lorsqu’un distributeur automatique appartient à un réseau, c’est l’opérateur du réseau qui effectue la déclaration en premier lieu.
- Niveau de consolidation : sans objet.
- Fréquence : quotidienne.
- Date limite de transmission : 1 jour à compter de la date de référence.
3) Ajustements des seuils pour les enquêtes existantes (résumé) :
- Enquête mensuelle détaillée sur le bilan : relèvement du seuil de déclaration.
- Enquête sur le bilan des statistiques monétaires : mise à jour du seuil pour les postes éligibles à M3 à 4,4 milliards de CHF.
Postes du bilan par taux d’intérêt : mise à jour des seuils (dépôts en CHF > 5,7 milliards de CHF ou engagements interbancaires en CHF > 1,3 milliard de CHF).
- Statistiques bancaires consolidées de la BRI : critères mis à jour, y compris les règles relatives aux entités du groupe.
- Statistiques bancaires par lieu d’implantation de la BRI (statistiques sur les devises de la zone euro) : seuil de déclaration porté à 1,7 milliard de CHF.
- Statistiques de la BRI sur les produits dérivés de gré à gré : seuil semestriel de 2 500 milliards de CHF ; seuil triennal de 8 milliards de CHF (volume) ou de 30 milliards de CHF (encours).
- Enquête sur la balance des comptes courants : rebaptisée « Enquête sur la balance des comptes courants » ; seuil de 100 000 CHF pour les transactions avec des contreparties non résidentes.
- Enquête sur les relations financières avec l’étranger : critères actualisés (encours d’actifs financiers > 10 millions de CHF ; transactions financières > 1 million de CHF ; revenus des filiales étrangères > 1 million de CHF).
UNITED KINGDOM
CAPITAL MARKETS
FCA publishes consultation on preparing for the new transaction reporting regime
![]()
On 2 October 2026, the Financial Conduct Authority (FCA) published Consultation Paper CP26/34 – Preparing for the new transaction reporting regime, which consults on guidance, transitional provisions and consequential amendments designed to support implementation of the FCA’s new transaction reporting framework.
Scope of Interest for the consultation:
- Investment firms
- Operators of trading venues
- Approved reporting mechanisms
- Trade associations
- Other market participants involved in submitting transaction reports, instrument reference data or order book data
Key Takeaways:
- The FCA proposes guidance for the new Transaction Reporting User Pack, including guidance on client indicator fields, conditional single-sided reporting, the meaning of a transaction, branch execution, equity swaps, strike prices and package transactions. The User Pack will bring together relevant existing guidance, clarifications and examples to help firms comply with the new regime.
- The FCA proposes transitional provisions covering reporting immediately before the 3 April 2028 implementation date and subsequent corrections and reconciliations. After implementation, corrections and late submissions will generally need to follow the MAR 14 and MAR 15 formats, although firms will not be expected to provide information that was not required when a transaction was originally executed or data originally submitted.
- The consultation also proposes consequential amendments to the FCA Handbook and Technical Standards, including COBS, MAR, REC and SYSC, to replace references to the existing UK MiFIR framework with MAR 13, MAR 14 and MAR 15. The FCA is also considering removing EU-only financial instruments from FCA FIRDS before implementation, subject to underlying legislative changes.
The consultation closes on 6 November 2026. The FCA plans a further consultation on the Transaction Reporting User Pack in Q1 2027, with the final User Pack to be published by 3 April 2027, ahead of the new regime taking effect on 3 April 2028.
FINANCIAL PRODUCTS
FCA publishes consultation on fair redemption terms for authorised funds investing in illiquid assets
![]()
On 8 October 2026, the Financial Conduct Authority (FCA) published Consultation Paper CP26/35: Fair redemption terms for authorised funds investing in illiquid assets, which proposes changes to the rules for authorised funds so that redemption terms better reflect the time needed to realise inherently illiquid assets. The FCA aims to address liquidity mismatch, improve liquidity risk management and align its framework with revised international standards.
Key Takeaways:
- The FCA proposes that non-UCITS retail schemes (NURS) with at least 50% of scheme property invested in inherently illiquid assets (FIIAs) should have no more than one dealing day per month for redemptions and a minimum 90-day notice period. All NURS managers would also be permitted to introduce limited redemption arrangements where appropriate to align redemption terms with the fund's liquidity profile.
- The proposals would amend the FIIA regime, including the definition of inherently illiquid assets, investor disclosures and risk warnings, suspension and deferral arrangements, and redemption-request revocations. The FCA also proposes related changes for LTAFs, including allowing limited revocation of redemption requests where this would not prejudice other investors.
- The proposals particularly affect AFMs of relevant NURS and LTAFs, while depositaries, distributors, financial advisers, platforms and other intermediaries may also be affected. For existing NURS that would be FIIAs under the amended definition, the FCA proposes a 2-year implementation period. New funds launched after the rules are made would generally be subject to the new rules 6 months later.
The consultation closes on 11 December 2026. The FCA will consider feedback before deciding whether and when to make final rules.
UK publishes amendments to UK EMIR rules on intragroup OTC derivatives
![]()
On 21 October 2026, the UK published the Over the Counter Derivatives (Intragroup Transactions) Regulations 2026 (the Regulations). The Regulations amend the existing UK EMIR framework for intragroup exemptions from clearing and risk-management requirements for OTC derivatives.
- The Regulations apply across the UK. They concern intragroup OTC derivative transactions within the same consolidated group, including transactions involving UK and third-country counterparties.
Key Requirements:
- The definition of an intragroup transaction is amended. Transactions between entities in the same consolidated group may qualify regardless of where the entities are established. The entities must be included in the same consolidation on a full basis and be subject to appropriate centralised risk evaluation, measurement and control procedures.
- Certain intragroup exemptions involving third-country counterparties are subject to an FCA notification process. The exemption can generally be used after the 30-calendar-day period if the FCA does not object. It can be used earlier if the FCA confirms that it does not object.
- Existing qualifying intragroup exemptions are protected by transitional provisions. Where the relevant conditions are met, counterparties can continue to rely on an existing exemption without submitting a new application or notification.
- The Regulations also remove the requirement to publicly disclose details of margin exemptions.
Entry into Force:
- The Regulations do not specify a fixed commencement date. They will take effect when the UK’s Temporary Intragroup Exemption Regime (TIGER), currently due to expire at the end of 2026, is revoked.
- Existing qualifying exemptions can continue under the new framework, subject to the transitional conditions, without counterparties to reapply or renotify.
GOVERNANCE & ORGANISATION
FCA publishes User Guide: Applications and notifications for UK Authorised Funds
![]()
On 21 October 2026, the Financial Conduct Authority (FCA) published User Guide: Applications and notifications for UK Authorised Funds, which explains how registered users of UK authorised firms can use Connect to make applications and notifications relating to UK authorised funds. The guide covers applications for new UK schemes, requests for approval of changes to existing authorised funds, and notifications of approved changes through Form FN.
Key Takeaways:
- The guide covers three application journeys: applying for a new UK authorised scheme, including an Authorised Contractual Scheme, Authorised Unit Trust or Investment Company with Variable Capital; requesting approval for a change or termination to an existing authorised fund; and notifying the FCA of an approved fund change through Form FN.
- Users must be registered for a UK authorised firm and have the appropriate Connect access. For Form FN submissions, the guide specifies that the fund alteration application type permission is required. Applications involve downloading the relevant form, completing and uploading it together with listed supporting documents, reviewing the submission and completing the declaration before sending it.
- Application downloads may change, and the FCA instructs users to check the version each time they apply because an old application form will not be accepted and may require resubmission.
The new forms and application journey in Connect will become available when the service goes live on 2 November 2026; firms cannot access them before that date.
PRA and FCA publish consultations on Phase 2 reforms to the Senior Managers & Certification Regime
![]()
On 22 October 2026, the Prudential Regulation Authority (PRA) published CP14/26 – Review of the Senior Managers and Certification Regime (SM&CR) – Phase 2, alongside the Financial Conduct Authority’s (FCA) CP26/37 – Senior Managers & Certification Regime Review: Phase 2, which consult on substantial reforms intended to streamline the UK SM&CR while maintaining individual accountability. The proposals depend materially on legislative changes in the Financial Services and Markets Bill 2026.
Key Takeaways:
- The regulators propose moving a number of Senior Management Functions from regulatory pre-approval to notification, while retaining firm responsibility for assessing fitness and propriety. Other proposals include simplifying Prescribed Responsibilities, Statements of Responsibilities and Management Responsibilities Maps, extending temporary SMF cover from 12 to 18 weeks, and introducing greater flexibility for certain time-limited or conditional approvals. The FCA additionally proposes removing SMF18 and SMF22 and raising certain Enhanced firm thresholds.
- Both regulators propose removing the Certification Regime. The FCA also proposes retiring the Directory and removing associated reporting and attestation, while retaining other requirements concerning employee competence, suitability and conduct.
- Conduct Rules would remain, but reporting requirements would be streamlined. The FCA proposes replacing existing Conduct Rules training requirements with an obligation to notify staff of applicable rules and breach consequences and raising the reporting threshold for most non-SMF staff.
Responses to both consultations are due by 22 January 2027. The FCA intends to publish final rules in H1 2027 and implement them around six months later in H2 2027; the PRA likewise expects implementation in H2 2027, dependent on legislation and HMT commencement powers.
UNITED STATES
CAPITAL MARKETS
FINRA publishes a regulatory notice on amendments to corporate financing and private placement rules
![]()
On 21 October 2026, FINRA published Regulatory Notice 26-19, which announces amendments to Rules 5110 and 5123 concerning underwriting terms and arrangements for public offerings and filing requirements for private placements.
The amendments apply to FINRA members participating in public offerings or private placements of securities. They are particularly relevant to broker-dealers, underwriters and their affiliates involved in offering arrangements, underwriting compensation or private-placement filings.
Key Requirements:
- Amended Rule 5110 introduces a more predictable method for valuing securities treated as underwriting compensation and adds exclusions for qualifying debt-for-equity exchanges, certain investments connected with DPPs and unlisted REITs, and non-convertible preferred securities acquired at a fair price.
- Rule 5110 also permits certain termination and tail fees, as well as rights of first refusal, subject to conditions concerning termination for cause, reasonable compensation and the completion of a transaction within two years.
- Amended Rule 5123 expands the private-placement filing exemption to qualifying entities and family offices with more than USD 5 million in investments or assets under management.
Key Timeline:
- 21 October 2026: Rule 5123 amendments entered into effect.
- 21 December 2026: Rule 5110 amendments enter into effect.
- Offerings with an initial Rule 5110 filing date before 21 December 2026 remain subject to the existing rule for the duration of the offering. Offerings initially filed on or after that date must comply with the amended rule.
FINRA members should assess the amendments and prepare to apply the revised Rule 5110 requirements from 21 December 2026.
FINRA publishes a Regulatory Notice on amendments to Rule 4515.01 governing allocations of investment adviser bulk orders
![]()
On 9 October 2026, FINRA published Regulatory Notice 26-17, which adopts amendments to FINRA Rule 4515.01 (Allocations of Orders Made by Investment Advisers). The amendments remove the requirement for a qualified principal of a member firm to review and approve allocations of investment adviser bulk orders when allocation instructions are received after the trade date.
Key Takeaways:
- The amendment expands the existing exception under Rule 4515.01 so that all investment adviser bulk orders may be allocated without principal approval, regardless of when allocation instructions are received.
- FINRA introduced the change to reduce operational burdens and support timely processing of allocations following the industry's move to a shortened settlement cycle.
- Existing investor protection safeguards remain unchanged. Firms are still prohibited from knowingly facilitating allocations that are inconsistent with the investment adviser’s original allocation intent or fiduciary obligations, including allocations based on trade performance after execution.
The amendments apply to bulk orders submitted by registered investment advisers on behalf of multiple client accounts, including both external investment advisers and associated persons providing advisory services through a member firm. The amendments become effective on 16 November 2026.
FINRA publishes a rule amendment on the regulatory treatment of binary options
![]()
On 26 October 2026, FINRA published Regulatory Notice 26-21, which announces amendments to its rules and updates to its interpretations concerning binary options.
The changes apply to FINRA member firms engaged in options-related activities. They cover binary options, including options whose payouts are based on an issuer’s reported financial or operating metrics, and options cleared by a registered clearing agency other than The Options Clearing Corporation.
Key Takeaways:
- FINRA amended Rule 2220 to clarify that requirements governing public communications about options apply to options based on metrics and options cleared through a clearing agency other than OCC.
- FINRA amended Rule 2360 to define “binary option” and “underlying metric” and clarify the application of requirements concerning position limits, large-position reporting, disclosure documents, confirmations, account statements, account opening, recordkeeping, suitability and supervision. FINRA also made conforming and clarifying amendments to Rules 2351 and 2357 concerning index and currency warrants.
- FINRA amended Rule 4210 and updated its interpretations to clarify margin requirements for binary options, including binary-option positions, spreads, straddles and similar combinations. The changes ensure that FINRA’s existing framework for listed options applies to binary and binary metric options in a substantially comparable manner.
Key Timeline:
- 22 October 2026: The rule amendments became effective.
FINRA member firms conducting affected binary-options activities must apply the amended rules and updated margin interpretations, which are already effective.
SEC publishes a press release on the proposed rule on expanding cross trading by registered funds
![]()
On 9 October 2026, the U.S. Securities and Exchange Commission (SEC) published a proposed rule to amend Rule 17a-7 under the Investment Company Act of 1940, which permits securities transactions between registered funds and certain affiliates under specified conditions. The proposal would expand the securities eligible for cross trading and modernise the applicable pricing, oversight and reporting requirements.
Key Takeaways:
- The proposed amendments would restore the ability of registered funds to cross trade most fixed-income securities. Cross trades allow a registered fund to buy securities from, or sell securities to, an affiliated fund without executing the transaction on the open market, which may reduce trading costs for funds and their shareholders.
- The SEC proposes updating the conditions governing cross trades, including requirements relating to the pricing and oversight of these transactions. The proposed changes take account of market developments that have made the pricing of certain securities more verifiable and transparent.
- Registered funds engaging in cross trading would be required to provide aggregated reporting of their trading activity and cross trades. This requirement is intended to increase transparency and would operate alongside enhanced investor-protection measures.
Timeline:
The proposal will be published in the Federal Register. The public comment period will remain open for 60 days following its publication in the Federal Register.
FINANCIAL CRIME
FinCEN publishes withdrawals of proposed rules on convertible virtual currency transactions, unhosted wallets and mixing
![]()
On 5 October 2026, FinCEN withdrew two proposed rules concerning convertible virtual currencies. The proposals would have introduced reporting and verification requirements for certain transactions involving unhosted wallets and a special measure targeting virtual currency mixing. FinCEN withdrew them following public feedback and as part of the US administration’s deregulatory agenda.
Key Takeaways:
- The proposed requirements will not enter into force.
- Financial institutions will not have to implement the proposed controls for transactions involving unhosted wallets.
- The proposed special measure targeting virtual currency mixing has also been withdrawn.
- The withdrawals reduce potential compliance obligations for banks, payment providers and crypto-asset service providers.
FINANCIAL PRODUCTS
CFTC publishes a statement on the approval of a KPI-based swap contract for trading on a designated contract market
![]()
On 27 October 2026, the Commodity Futures Trading Commission (CFTC) published a statement by Chairman Michael S. Selig on the Commission’s approval of a designated contract market’s listing of a key performance indicator contract, which explains the regulatory treatment of the approved product.
Key Takeaways:
- The CFTC approved a designated contract market’s request to list a cash-settled, binary outcome contract whose settlement is based on a key performance indicator. The contract is structured as a swap under the Commodity Exchange Act, traded on a designated contract market and cleared through a registered derivatives clearing organization.
- The approved contract, as well as similar contracts listed by designated contract markets, remains subject to the Commodity Exchange Act, the CFTC’s regulations and the applicable designated contract market Core Principles. The approval relates specifically to contracts structured and traded within the CFTC-regulated framework.
- The approval does not determine the treatment of products based on the same KPIs but structured differently. Depending on their legal structure, comparable KPI-based products may fall under SEC jurisdiction. The statement presents the CFTC and SEC decisions as supporting regulatory coordination and the lawful introduction of new financial instruments.
Following the approval, the KPI contract may be listed and traded on the designated contract market in accordance with the Commodity Exchange Act and applicable CFTC requirements.
CFTC publishes consultation on crypto-asset transactions and crypto-asset markets
![]()
On 5 October 2026, the Commodity Futures Trading Commission (CFTC) published an Advanced Notice of Proposed Rulemaking on the regulation of crypto-asset transactions and crypto-asset markets, which seeks public feedback on a potential comprehensive US regulatory framework for certain retail commodity transactions involving crypto-assets.
Key Takeaways:
- The CFTC is considering rules intended to prevent fraud and abusive practices in crypto-asset markets through a uniform national regulatory framework.
- The potential framework would clarify how existing regulatory requirements apply to retail crypto-asset transactions and provide market participants with information on industry practices considered appropriate for regulatory compliance.
- The CFTC is considering creating a specialised subcategory of designated contract market registration called a crypto-asset market, specifically designed for covered crypto-asset transactions.
This is an early-stage consultation rather than a final rule, meaning that it does not introduce immediate binding obligations. The CFTC will use the comments received to inform potential future rulemaking under Section 2(c)(2)(D) of the Commodity Exchange Act.
Written comments must be submitted within 60 days following publication of the Advanced Notice of Proposed Rulemaking in the Federal Register.
GOVERNANCE & ORGANISATION
FINRA publishes a regulatory notice on 2027 registration renewals and payment deadlines
![]()
On 29 October 2026, the Financial Industry Regulatory Authority published Regulatory Notice 26-22 setting out the 2027 renewal process for broker-dealers, investment adviser firms, branches, agents and investment adviser representatives. The notice covers renewal fees and registrations maintained through the Central Registration Depository and Investment Adviser Registration Depository, including registrations with participating self-regulatory organisations and US jurisdictions.
Key Takeaways:
- Preliminary renewal statements: Preliminary Statements will become available in E-Bill on 9 November 2026 and will include the applicable renewal fees for firms, branches and individuals. Firms should download and retain their renewal reports because they will be replaced when Final Statements are issued and cannot subsequently be recreated.
- Mandatory payment: Full payment of the Preliminary Statement is due by 7 December 2026, with 2 December 2026 identified as the recommended deadline for electronic payments, wire transfers and overnight checks. Late payment may result in additional fees and potential business ineligibility in certain jurisdictions.
- Registration review: Firms may submit post-dated termination filings for registrations that will terminate on 31 December 2026, thereby avoiding unnecessary 2027 renewal fees. Such filings cannot be withdrawn, and incorrect submissions may require new registrations and additional fees after the systems reopen.
- Year-end filings: All electronic filings through CRD, IARD, Web EFT and FINRA Gateway, including Forms BDW, must be submitted by 27 December 2026, before the year-end system shutdown.
- Final reconciliation: Final Statements will become available on 2 January 2027 and will reflect registration information as of 31 December 2026. Additional payments and discrepancy reports must be submitted by 22 January 2027.
FINRA publishes a regulatory notice on new outside activities requirements (Rule 3290)
![]()
On 26 October 2026, FINRA published Regulatory Notice 26-20, which announces new Rule 3290, replacing Rules 3270 and 3280 and consolidating requirements for outside investment-related activities and outside securities transactions.
- Rule 3290 covers investment-related activities that registered or associated persons undertake outside their relationship with a FINRA member, including activities involving securities, crypto-assets, commodities, derivatives, currencies, banking, real estate or insurance.
- Activities performed for the member or its affiliate are excluded, including investment-advisory work for a dually registered broker-dealer and investment adviser, or advisory, insurance or banking work for an affiliated entity. Activity for an unaffiliated registered investment adviser remains reportable, but the member generally does not have to supervise or keep records of the advisory activity itself. Certain immediate-family transactions and specified personal investments are also excluded.
Key Requirements:
- Registered persons must provide prior written notice of covered outside activities. Associated persons must notify the member of outside securities transactions, with prior approval required where selling compensation is involved.
- Members must assess the activity or transaction, including customer involvement, potential conflicts, interference with the person’s responsibilities and whether it could appear to form part of the member’s business.
- Approved transactions involving selling compensation must be recorded and supervised. Members must also maintain records of compliance and supervise adherence to any conditions imposed.
Key Timeline:
- 25 October 2027: Rule 3290 takes effect and replaces Rules 3270 and 3280.
- Existing FINRA guidance treating certain outside investment-advisory activities as private securities transactions will be superseded.
FINRA member firms should update their notification, assessment, approval, supervision and recordkeeping arrangements before 25 October 2027.
CONTACTS
This publication is produced by the Group Regulatory Watch Team with the collaboration of experts from the Legal Department and the Compliance Department of CACEIS entities, together with the close support of the Communications Department.
Editor
Gaëlle Kerboeuf, Group Regulatory Watch Senior Expert – Compliance
Permanent Editorial Committee
Gaëlle Kerboeuf, Group Regulatory Watch Senior Expert – Compliance
Corinne Brand, Group Content Manager – Communication
Local
François Honnay, Head of Legal (Belgium)
Fanny Thomas, Head of Legal Client Contracts (France)
Jeanne Laurent, Head of Unit - Business Compliance
Stefan Ullrich, Head of Legal (Germany)
Costanza Bucci, Head of Legal & Compliance (Italy)
Luciana Vertulli, Compliance Officer (Italy)
Sinead Allen, Compliance (Jersey)
Fernand Costinha, Group Head, Legal (Luxembourg)
Julien Fetick, Senior Financial Lawyer (Luxembourg)
Gérald Stadelmann, Head of Legal (Luxcellence Luxembourg)
Markus Bormann, Head of division Legal (Switzerland)
Puck Kranénburg (The Netherlands)
Raymond Boddenberg (The Netherlands)
Robin Donagh, Head of Legal (Ireland)
Selda Karaca, Head of Legal and Compliance (Canada)
Yves Cardinali, Head of unit, Compliance (UK)
Katherine Petcher, Group Head, Legal (Common Law Countries)
Beatriz Sanchez Jete, Compliance (Spain)
Jessica Silva, Compliance (Brazil)
Luiz Fernando Silva, Compliance (Brazil)
Libia Andrea Carvajal, Compliance (Colombia)
Daiana Garcia, Compliance (Colombia)
Karim Martínez, Compliance (Mexico)
Edgar Zugasti, Compliance (Mexico)
Design
CACEIS Group Communications
Photos credit
CACEIS, Adobe Stock
CACEIS
89-91 rue Gabriel Péri
92120 Montrouge