Regulatory updates from the EBA, ECB, ESMA, FCA, PRA, and other competent authorities, with practical analysis of what changes for reporting teams. Coverage includes EBA framework releases (4.x DPM packages), CRR3 implementation milestones, MiCAR and AML rule developments, sanctions packages, supervisory reporting simplification proposals, CSRD sustainability reporting, and resolution framework changes (CMDI, MREL, SRB consultations). Each article translates the regulator’s announcement into what your firm needs to map, prepare, or change before the deadline. The focus is on banks, fund administrators, payment institutions, CRA-regulated firms, and supervised investment firms across the EU and UK. Use this section to track upcoming compliance deadlines and consultation responses.
On 28 September 2026 the CSSF published press release 26/19 announcing operational guidance for incident handling: nine rulebooks written jointly by cybersecurity experts from the High Commission for National Protection (HCPN, acting as ANSSI and as GOVCERT.LU), CIRCL, the CSSF and the ILR. The practical question for Luxembourg DORA entities is whether the CSSF incident…
On 25 September 2026 ITI Capital Ltd, an FCA-authorised broker that helped customers invest in shares and bonds and looked after those investments, entered special administration. Two insolvency practitioners from Teneo Financial Advisory Ltd were appointed as special administrators, and the FCA published a customer notice the same day. The firm had agreed on 10…
Directive 2024/825 applies in Luxembourg from Sunday 27 September 2026. On 23 September the CSSF published a two-paragraph communication reminding market participants that Directive (EU) 2024/825, known as the ECGT Directive on empowering consumers for the green transition, has been transposed by the Law of 9 June 2026 amending the Consumer Code. The CSSF expects…
The ESAs Autumn 2026 risk update, published on 23 September 2026 by the EBA, EIOPA and ESMA through their Joint Committee (reference JC 2026 29), puts a number on bank exposure to private credit and then qualifies it in a footnote. EU/EEA banks’ exposures to private credit funds and related asset managers reached nearly EUR…
Directive (EU) 2026/470 narrows the EU-level CSRD scope from financial years beginning on or after 1 January 2027, with Member State transposition required by 19 March 2027; Member States may separately exempt certain wave-one undertakings for financial years beginning in 2025 or 2026. Commission Delegated Regulation (EU) 2026/1560, adopted on 3 July 2026 and published…
On 16 September 2026 the three European Supervisory Authorities, the EBA, EIOPA and ESMA, published joint operational instructions for DORA major incident reporting. Short and technical, the document addresses something narrow and, for reporting teams, immediate: how selected fields of the major-incident template are expected or recommended to be populated, so that the data reaching…
The European Central Bank has been the sole gatekeeper for banking licences across the euro area since 4 November 2014, and in September 2026 it rewrote the manual for getting one. The revised Guide to licence applications, which replaces the 2019 edition, sets out how ECB banking authorisation works: who has to apply, how a…
On 18 September 2026 the CSSF told the Luxembourg investment fund industry that, as from 21 September 2026, the activation and deactivation of a suspension of redemptions only must be notified through the eDesk “LMT activation” module. The change reaches Luxembourg-domiciled undertakings for collective investment governed by the Law of 17 December 2010, specialised investment…
On 18 September 2026 the European Banking Authority published EBA/GL/2026/09, its final guidelines on the sound management of third-party risk relating to non-ICT services. The EBA third-party risk guidelines widen the governed perimeter beyond outsourcing, which remains a subset, to non-ICT third-party arrangements within the Guidelines’ defined scope, with particular focus on arrangements supporting critical…
On 17 September 2026 the CSSF published Version 1 of a single application form, an Excel workbook, for a Luxembourg investment fund manager seeking benchmark administrator authorisation or registration under the EU Benchmarks Regulation, Regulation (EU) 2016/1011. The document names the two populations it is written for: alternative investment fund managers and management companies authorised…