Regulatory Updates

Regulatory updates from the EBA, ECB, ESMA, FCA, PRA, and other competent authorities, with practical analysis of what changes for reporting teams. Coverage includes EBA framework releases (4.x DPM packages), CRR3 implementation milestones, MiCAR and AML rule developments, sanctions packages, supervisory reporting simplification proposals, CSRD sustainability reporting, and resolution framework changes (CMDI, MREL, SRB consultations). Each article translates the regulator’s announcement into what your firm needs to map, prepare, or change before the deadline. The focus is on banks, fund administrators, payment institutions, CRA-regulated firms, and supervised investment firms across the EU and UK. Use this section to track upcoming compliance deadlines and consultation responses.

  • AIFMD II Passport Notifications: New CSSF Templates From 31 July

    From 31 July 2026, a Luxembourg UCITS management company or authorised AIFM that notifies a cross-border management activity has to use a new set of forms. On 30 July 2026 the CSSF published updated notification-letter templates and confirmed that the earlier versions stop being valid the next day. The same cut-off applies to the eDesk…

  • SRB Business Reorganisation Plan Analysis Report: No New Requirements

    On 30 July 2026 the Single Resolution Board published a renewed Operational Guidance on the Business Reorganisation Plan Analysis Report, together with a complementary quantitative template and a feedback statement closing the public consultation that ran from 3 February to 30 March 2026. The SRB is explicit on one point that shapes how reporting and…

  • MAS AI Cyber Taskforce: What Singapore FIs Should Prepare Now

    On 28 July 2026, the Monetary Authority of Singapore (MAS) and the Association of Banks in Singapore (ABS) launched a joint body to defend the financial sector against cyber attacks that use frontier artificial intelligence. Its formal name is the AI-Driven Cyber and Technology Risk Taskforce, shortened to ACT. For a technology-risk or compliance officer,…

  • CSSF SFDR FAQ Update: When Template Changes Need Sign-Off

    On 21 July 2026 the CSSF published Version 5 of its FAQ on the Sustainable Finance Disclosure Regulation, and the whole revision sits in one question. Section II, Question 1 now sets out how a Luxembourg fund manager must handle changes to the Article 8 and 9 SFDR RTS precontractual templates that live inside a…

  • STAR-FS and DORA TLPT: Threat-Led Testing for Firms in Both Regimes

    A UK banking group with an EU financial entity identified by its competent authority for DORA threat-led penetration testing may be subject to STAR-FS in the UK and DORA TLPT in the EU at the same time. The Bank of England, the Prudential Regulation Authority and the Financial Conduct Authority maintain STAR-FS, the Simulated Targeted…

  • EU T+1 Settlement: First Deadline Is 7 December 2026

    The European Union will move to a T+1 securities settlement cycle on 11 October 2027. ESMA identifies 7 December 2026 as the first regulatory deadline for allocations and confirmations. The European Commission adopted the amending Delegated Regulation on 6 July 2026 as C(2026) 4640 final; it is currently under scrutiny by the European Parliament and…

  • MiFID II Triangular Passporting: ESMA’s July 2026 Supervisory Briefing

    On 7 July 2026 ESMA published a supervisory briefing on triangular passporting under MiFID II (reference ESMA35-243228190-8065), and the CSSF relayed it to Luxembourg professionals in a communique dated 17 July 2026. Triangular passporting is the arrangement where an authorised investment firm serves clients in one Member State through a branch or tied agent it…

  • EU Banking Competitiveness Communication: The Q1 2027 Reform Roadmap

    On 17 July 2026 the European Commission published its Communication on the Competitiveness of the Banking Sector and the Single Market in Banking, filed as COM(2026) 615 final with an accompanying Staff Working Document, SWD(2026) 615 final. It changes no reporting obligation the day it lands. What it does is set out the shape of…

  • ESMA Risk Management Function CSA: The 2026-2027 Supervisory Review

    On 3 July 2026, ESMA told every UCITS management company and alternative investment fund manager in the European Union that their risk management function is next in line for coordinated scrutiny. The announcement launched a Common Supervisory Action, an exercise ESMA will run with national competent authorities throughout 2026 and 2027, with a final report…