Your payment processing system goes down at 2:15 PM on a Tuesday. Client-facing services are unavailable. Internal teams are scrambling. At some point in the next few hours, someone needs to answer a question that has nothing to do with fixing the problem: does this incident meet the classification criteria for a “major ICT-related incident”…
Your compliance team filled out the CSSF Questionnaire on Financial Crime last year. This year, you can forget everything about that format. The CSSF has replaced its annual questionnaire with a standardised template developed by the European Authority for Anti-Money Laundering (AMLA). The data points are different, the structure is different, and the purpose extends…
Your compliance team has spent years building its AML framework around the Luxembourg Law of 12 November 2004, as amended, which transposes the EU Anti-Money Laundering Directives. That framework is about to be replaced. Not amended. Replaced. The AMLR (Regulation (EU) 2024/1624), published on 19 June 2024, is a directly applicable EU regulation that will…
Your compliance team has a list of ICT providers. Your procurement team has a different list. Your IT department has a third list that includes vendors nobody told compliance about. You now have until 31 March 2026 to reconcile all three into a single, structured, template-compliant DORA Register of Information and submit it to the…
Your treasury team wants to call an AT1 instrument. The economics are clear, the replacement is lined up, and the board has signed off. But you cannot pick up the phone and announce the call tomorrow. You need MREL prior permission first. And if you miss the application deadline or submit incomplete documentation, you are…
A single lapsed LEI can cascade into hundreds of rejected EMIR reports overnight, and those trades then have to be reconstructed and resubmitted. That is the reality of EMIR reporting: the regulation itself is logical enough, but the operational details will find every gap in your process. EMIR reporting applies to every entity that enters…
Introduction MiCAR (Markets in Crypto-Assets Regulation) creates the first comprehensive regulatory framework requiring crypto-asset service providers to implement authorization, prudential reporting, transaction monitoring, and incident notification systems. The Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114) represents the first unified rulebook for crypto-asset activities across the entire European Union. For reporting teams and compliance practitioners, MiCAR…
What Is FINREP and Why It Matters FINREP stands for Financial Reporting. It’s the European regulatory framework for collecting standardized financial data from banks and certain investment firms. If you work in prudential reporting at a European bank, FINREP is not optional – it’s a statutory obligation enforced by your national competent authority (NCA). The…
Why COREP Errors Matter COREP submission day is busy, stressful, and error-prone – but overlooking COREP reporting errors carries real consequences that extend far beyond a missed deadline. You’re pulling data from multiple systems, running reconciliations, and pushing templates through validation in the final hours. When errors appear – especially late – the pressure intensifies….
What Is MiFIR Transaction Reporting? Article 26 in Plain Terms MiFIR transaction reporting is the obligation, set out in Article 26 of Regulation (EU) No 600/2014 (MiFIR), that applies to investment firms and, under Article 1(2), to credit institutions when they provide investment services and/or perform investment activities. Where such an entity executes a reportable…