EU Financial Services Regulation
The EU's interconnected regulatory framework governing banks, insurers, investment firms, asset managers, payment providers, and crypto-asset firms. From Basel III to MiCA, DORA to the AML package -- the most comprehensive financial regulatory architecture in the world, in continuous evolution.
Financial regulation is the set of rules that governs how banks, insurers, investment firms, and other financial companies operate. In the EU, these rules are designed to prevent the kind of failures that caused the 2008 financial crisis -- ensuring that institutions hold enough capital to absorb losses, treat customers fairly, and do not become vehicles for money laundering or fraud.
If your company is a bank, an insurer, a payment provider, a fund manager, or a firm that trades securities or crypto-assets, EU financial regulation applies to you directly. If you are a technology company that provides critical services to any of these firms -- cloud hosting, core banking software, data analytics -- you are increasingly within scope too, particularly under the Digital Operational Resilience Act (DORA).
The period from 2024 to 2026 is unusually intense. Several major pieces of legislation are landing at the same time: new capital rules for banks, a dedicated EU agency for anti-money laundering, mandatory instant payments, the first comprehensive crypto-asset regime, and digital resilience requirements that apply across the entire financial sector. For compliance teams, this means parallel implementation projects with overlapping deadlines.
In practical terms: if you operate in financial services anywhere in the EU, you need to understand which regulations apply to your specific entity type, what the deadlines are, and where the supervisory pressure is building. This page maps that landscape.
Switzerland is not an EU member state and does not directly adopt EU financial regulation. However, Swiss financial institutions are supervised by FINMA under a framework that is largely equivalent to EU standards -- a status that is critical for maintaining cross-border market access. Swiss banks, insurers, and asset managers serving EU clients or operating EU subsidiaries must comply with EU rules in those jurisdictions, and equivalence decisions (such as those under MiFIR or Solvency II) depend on Switzerland keeping its domestic framework aligned.
Key areas of divergence to watch: Switzerland has not adopted MiCA, meaning Swiss crypto firms serving EU customers face a separate licensing requirement. The new EU AML Authority (AMLA) will not directly supervise Swiss entities, but Swiss obliged entities forming part of EU group structures may be indirectly affected. DORA does not apply in Switzerland, but FINMA circular 2023/1 on operational risks and ICT covers similar ground. Swiss firms should map their EU exposure and maintain a rolling gap analysis against the regulations listed on this page.
The EU financial regulatory architecture is organised into eight interconnected pillars. Each pillar contains multiple legislative instruments that interact across boundaries.
The EU financial supervisory architecture is a multi-layered system of European authorities, national competent authorities, and specialised agencies.
Key regulatory developments in the 2025-2026 cycle. The current period represents a once-in-a-decade convergence of major financial regulation milestones.
EU implements final Basel III reforms. Output floor starts at 50%, rising to 72.5% by 2030. New standardised approach for credit, market, and operational risk.
Digital Operational Resilience Act becomes mandatory for banks, insurers, investment firms, payment providers, and their critical ICT third-party providers.
Commission proposes streamlining SFDR, Taxonomy, CSRD, and CSDDD reporting. Aims to reduce administrative burden by up to 25% for financial and non-financial companies.
Anti-Money Laundering Authority in Frankfurt begins building supervisory capacity. Will directly supervise ~40 highest-risk entities from 2028.
Eurozone PSPs must send SEPA instant credit transfers at no extra charge within 10 seconds, 24/7/365 (receive obligation already applied from January 2025). Non-eurozone PSPs follow in 2027-2028.
Revised rules for alternative and UCITS fund managers: mandatory liquidity management tools, loan origination framework, delegation substance requirements.
EU-wide ban on payment for order flow. Brokers must route retail orders based on best execution without conflicted inducements.
New payment services framework replacing PSD2. PSR as directly applicable regulation, PSD3 directive for authorisation. Enhanced fraud prevention, IBAN-name verification.
Financial regulation applies differently across sectors. Each has a primary prudential or conduct framework, supplemented by cross-cutting requirements.
Select your entity type for tailored compliance guidance across the EU financial regulatory framework.
From the post-crisis reforms to the digital finance era. The current 2024-2026 cluster is the densest period of financial regulatory change since 2008.