No description available.
Asset ManagerWealth ManagerBank
No description available.
Asset ManagerWealth Manager
No description available.
BankWealth ManagerAsset Manager
No description available.
BankWealth ManagerAsset Manager
No description available.
Asset ManagerWealth Manager
No description available.
Asset ManagerWealth Manager
No description available.
BankAsset ManagerWealth Manager
No description available.
BankWealth ManagerAsset Manager
No description available.
BankBroker Dealer
No description available.
BankWealth ManagerAsset Manager
No description available.
BankWealth ManagerAsset Manager
No description available.
BankWealth ManagerAsset Manager
Press release 26/02
BankBroker Dealer
No description available.
BankAsset ManagerWealth Manager
No description available.
BankWealth ManagerPayment Provider
No description available.
BankAsset ManagerWealth Manager
No description available.
BankBroker DealerAsset Manager
No description available.
CSSF Circular 26/906, published on 20 January 2026, establishes detailed requirements for central administration, internal governance, and risk management for payment institutions (PIs) and electronic money institutions (EMIs) in Luxembourg, repealing prior circulars IML 95/120, IML 96/126, IML 98/143, and CSSF 04/155. It clarifies application of the amended Law of 10 November 2009 on payment services, emphasizing robust governance amid sector growth to ensure safety, efficiency, and trust. This matters for compliance as it mandates comprehensive reviews and updates to governance frameworks by mid-2026, addressing rising transaction volumes.
#
What Changed
The circular consolidates and updates governance rules, focusing on:
Management bodies: Responsibilities, composition, qualifications, organization, and functioning, including CSSF authorization of members based on professional experience, standing (e.g., police records), and irreproachable conduct.
Internal control functions: Responsibilities, characteristics, organization, and execution of work for compliance officers and internal auditors, with notifications to CSSF including detailed persona
What You Need To Do
- Gap analysis
- Updates and notifications
- Implementation
- Documentation
Key Dates
20 January 2026 - Publication date of Circular CSSF 26/906.
30 June 2026 - Compliance deadline: Institutions must assess/review central administration, internal governance, and risk management frameworks to ensure full compliance. DEADLINE
Compliance Impact
Urgency: High - With ~5 months from publication (20 Jan 2026) to compliance (30 Jun 2026), firms face tight timelines for assessments, policy overhauls, and CSSF notifications, especially given repealed circulars and sector growth pressures. Non-compliance risks supervisory actions, as this fosters
Payment ProviderFintech
Central administration, internal governance and risk management
Circular CSSF 26/906, published on 20 January 2026, consolidates and clarifies Luxembourg's rules on central administration, internal governance, and risk management specifically for payment institutions, electronic money institutions, and account information service providers. It repeals prior circulars (IML 95/120, IML 96/126, IML 98/143, and CSSF 04/155) to address growth in transaction volumes by mandating robust governance, control functions, and risk processes, enhancing safety, efficiency, and trust in these services. This matters for compliance professionals as it strengthens defenses against financial crime, operational risks, and supervisory scrutiny in a high-growth sector.
#
What Changed
Consolidation and repeal: Replaces outdated circulars with unified requirements under the amended Law of 10 November 2009 on payment services, covering central administration (decision-making must be in Luxembourg), management body responsibilities, internal control functions (compliance, risk management, internal audit as independent second/third lines), conflicts of interest management, new product approval processes, and client funds safeguarding (e.g., segregation, daily/weekly reconciliatio
What You Need To Do
- Assess and update governance frameworks
- Confirm control functions
- Implement operational safeguards
- Document proportionality
- Retain records and report
Key Dates
20 January 2026 - Publication date of Circular CSSF 26/906 .
30 June 2026 - Compliance deadline Institutions must assess, review, and ensure their central administration, internal governance, and risk management frameworks fully comply with the circular. DEADLINE
Compliance Impact
Urgency: High – With a 30 June 2026 deadline (five months from publication), firms face immediate pressure to review and remediate governance gaps amid sector growth and heightened AML/CFT scrutiny; non-compliance risks supervisory actions, fines, or license issues, especially as it closes criminal
Payment Provider
Application of the Guidelines of the European Banking Authority on the management of environmental, social and governance (ESG) risks (EBA/GL/2025/01)
Circular CSSF 26/905 mandates the application of EBA Guidelines (EBA/GL/2025/01) on managing **ESG risks** for Luxembourg-supervised institutions, requiring integration of environmental, social, and governance risk identification, measurement, management, and monitoring into internal processes. This aligns with CRD amendments (Articles 74, 76, 87a) and emphasizes proportionality to institutions' business models, with plans including timelines, targets, and milestones toward EU climate goals like net-zero by 2050. It matters for compliance as it embeds ESG into prudential supervision, potentially impacting capital, risk frameworks, and supervisory reviews.
#
What Changed
Institutions must establish proportionate strategies, policies, processes, and systems for ESG risk management, covering short-, medium-, and long-term horizons, including transition and physical environmental risks.
Develop plans per Article 76(2) CRD with specific timelines, intermediate quantifiable targets, and milestones to address ESG financial risks, consistent with EU objectives (e.g., 55% GHG reduction by 2030, climate neutrality by 2050).
Incorporate ESG into internal governance, risk
What You Need To Do
- Map and integrate ESG risks into governance, risk management frameworks, and business strategies, proportionate to scale/risk exposure
- Develop and document ESG risk management plans with quantifiable targets, milestones, timelines, and scenario analyses (broad requirements now; detailed later)
- Conduct assessments of ESG risks in portfolios, including sustainability products, transition finance, and loan origination policies, for SREP submission
- Embed in internal processes per Articles 74, 76, 87a CRD: identify/measure ESG risks (minimum standards), monitor over time horizons, and report to CSSF
- Review and update existing policies/systems for compliance by applicable dates; prepare for CSSF supervisory evaluation of plan robustness
Key Dates
20 January 2026 - Circular published by CSSF.
1 April 2026 - Application date for Less Significant Institutions (other than SNCIs).
11 January 2027 - Application date for SNCIs (dependent on CRD transposition).
Compliance Impact
Urgency: High - With application starting 1 April 2026 (just over 2 months from publication), firms face immediate pressure to gap-analyze current ESG frameworks against EBA standards, especially for SREP integration and long-term risk planning. Non-compliance risks supervisory scrutiny, capital add
BankAll Firms
2026 update
BankWealth ManagerFamily Office
No description available.
BankAsset ManagerWealth Manager
No description available.
BankAsset ManagerWealth Manager
Communiqué
The CSSF's January 2026 enforcement report documents the results of its 2025 examination campaign on 2024 financial and non-financial disclosures by issuers under Luxembourg's Transparency Law. This publication is critical for compliance professionals because it reveals systematic compliance gaps across financial reporting (IFRS), sustainability reporting (ESRS), and Alternative Performance Measures (APMs), with 27% of enforcement decisions resulting in injunctions for non-compliance.
What Changed
The regulatory landscape has evolved significantly with the introduction of new sustainability reporting requirements:
ESRS Implementation (First Year): 2024 marked the first full reporting year under the European Sustainability Reporting Standards (ESRS), with the CSSF conducting a fact-finding exercise to assess reporting quality. The CSSF noted an overall increase in reporting quality with better-structured reports and more relevant disclosures, though key improvement areas remain in compreh
What You Need To Do
- *Financial Information (IFRS)
- *Enhanced Note Disclosures
- *Cash Flow Statement Presentation
- *Segment Reporting Completeness
- *Going Concern Assessment
Key Dates
4 July 2025 - European Commission adopted Delegated Act amending Taxonomy Disclosures (Omnibus package)
18 August 2025 - CSSF published full results of fact-finding exercise on ESRS reporting
5 December 2024 - CSSF published enforcement priorities press release for FY2024 reporting
January 2026 - CSSF published enforcement results report (current publication)
Compliance Impact
Urgency: HIGH
All Firms
relating to the fees to be levied by the Commission de Surveillance du Secteur Financier
BankAsset ManagerWealth Manager
amending Council Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine
BankWealth ManagerAsset Manager
No description available.
BankWealth ManagerAsset Manager
Electronic transmission of documents to the CSSF
Circular CSSF 19/708 mandates the electronic transmission of specified documents to the CSSF via secure platforms like e-file or SOFiE, effective from February 1, 2019, replacing prior paper or other methods. This updated annex (as amended by Circular CSSF 21/790 and further revisions up to April 1, 2025) standardizes submissions for investment funds and related entities, reducing administrative burdens while ensuring document integrity and CSSF accessibility. Compliance professionals must monitor the dynamic annex list on the CSSF website to avoid nullified submissions.
#
What Changed
Mandatory Electronic-Only Submission: Documents listed in Annex I must be transmitted exclusively via e-file (http://www.e-file.lu) or SOFiE (http://www.cetrel-securities.lu/wp_static/what-do-we-offer/secured-reporting-channel-sofie-sort/), in PDF format supporting read access, printing, copy/paste, and word search; other methods post-February 1, 2019, are null and void.
Dynamic Annex Updates: The annex, published on the CSSF website, is regularly updated (e.g., latest noted April 1, 2025) and i
What You Need To Do
- Register/access e-file or SOFiE platforms if not already (test/production environments available since February 2019)
- Consult and adhere to the latest Annex I for document list, nomenclatures, and formats (PDF with full functionality)
- Ensure submissions are final/official versions matching hard copies; use specified identifiers for UCIs/SIFs/SICARs
- Implement processes for automatic/manual transmission (e
- Train staff on responsibilities and integrate into reporting workflows; reference CSSF FAQs for closing documents
Key Dates
1 February 2019 - Entry into force Mandatory electronic transmission for listed documents; non-electronic submissions null and void.
28 January 2019 - Publication date of original Circular CSSF 19/708.
22 December 2021 - Amendment by Circular CSSF 21/790.
1 April 2025 - Latest annex update noted.
Ongoing - Regular checks required Entities must monitor CSSF website for annex updates. DEADLINE
Compliance Impact
Urgency: Low (for new implementations post-2019; medium for ongoing monitoring). This matters for operational efficiency and CSSF relations, as non-compliance risks rejected filings, delays (e.g., approvals under SFDR processes), or supervisory scrutiny, but long-standing rule (since 2019) with esta
Asset ManagerWealth ManagerInsurance No description available.
Bank
Administrative sanction imposed on BigRep SE
The CSSF imposed a €10,000 administrative fine on BigRep SE on 12 January 2026 for failing to publish its half-yearly financial report as of 30 June 2025, as required under Article 4 of Luxembourg's Transparency Law of 11 January 2008 (as amended). This enforcement action underscores the CSSF's rigorous supervision of periodic disclosure obligations for issuers with Luxembourg as their home Member State, serving as a reminder of the consequences for non-compliance with transparency requirements. Compliance professionals should note this as evidence of ongoing CSSF scrutiny on timely reporting, with potential fines scaled based on circumstances per Article 26a.
#
What Changed
This is not a regulatory change or new requirement but an enforcement of existing obligations under the Transparency Law of 11 January 2008 (as amended), specifically Article 4, which mandates issuers to publish half-yearly financial reports, including effective dissemination, storage on the Officially Appointed Mechanism (OAM), and filing with the CSSF. No new rules are introduced; the sanction reinforces the unchanged deadlines and processes for periodic information publication, with the CSSF
What You Need To Do
- All affected parties
- BigRep SE specifically
- wide actions are mandated beyond general adherence, but proactive audits are advisable given CSSF's supervisory focus
Key Dates
30 June 2025 - Period-end date for the required half-yearly financial report that BigRep SE failed to publish. DEADLINE
12 January 2026 - Date of administrative sanction imposition by CSSF and publication of the decision.
Within 3 months of 12 January 2026 (i.e., by 12 April 2026) - Deadline for BigRep SE to lodge a court action with the Tribunal administratif against the sanction, per Article 27 of the Transparency Law. DEADLINE
Compliance Impact
Urgency: Medium – This matters as a specific enforcement example in CSSF's ongoing verification of periodic information publication, signaling heightened scrutiny rather than a systemic shift. While the €10,000 fine is modest, it demonstrates fines for even isolated breaches (scaled per Article 26a)
All Firms
No description available.
This CSSF publication, dated January 12, 2026, identifies the specific population (likely a firm or individual) subject to an enforcement action, such as an administrative sanction, as part of the CSSF's transparency in supervisory measures. It matters because it signals CSSF's active enforcement priorities, potentially in areas like AML or reporting failures, enabling firms to assess similar risks in their operations and strengthen compliance to avoid parallel actions. Published amid rising focus on financial crime typologies like sexual extortion, it underscores the regulator's commitment to public accountability.
#
What Changed
No new regulatory changes or requirements are introduced in this publication, as it is an enforcement notice rather than a circular or guideline. It serves as a disclosure of an ongoing or concluded enforcement case, aligning with CSSF's practice of publishing sanction details to deter non-compliance and inform the market, without altering existing rules.
#
What You Need To Do
- For the named population
- For all supervised firms
- Update internal policies, train staff on enforcement precedents, and ensure robust reporting under Circular CSSF 19/726 or Transparency Law obligations
Compliance Impact
Urgency: High – Immediate relevance for the named party facing direct consequences; medium-to-high for peers due to CSSF's pattern of public enforcements signaling heightened scrutiny on financial crime, especially amid rising OCSE/FSEC cases noted in recent CSSF guidance. It matters as it could pre
BankPayment ProviderAll Firms
amending Delegated Regulation (EU) 2016/1675 to add Russia to the list of high-risk third countries with strategic deficiencies
BankAsset ManagerWealth Manager
Administrative sanction imposed on the alternative investment fund manager Premium Capital Management (“AIFM”)
The CSSF imposed a €10,000 administrative fine on 11 September 2025 against alternative investment fund manager (AIFM) Premium Capital Management for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties, signaling heightened scrutiny on timely supervisory cooperation amid ongoing AML risks in Luxembourg. Compliance teams should view this as a reminder of the low tolerance for even administrative lapses, with potential for escalated fines in repeat cases.
#
What Changed
This is not a regulatory change but an enforcement precedent under existing rules: non-compliance with Article 5(1) of the AML/CFT Law, which mandates annual submission of a financial crime questionnaire ("Questionnaire") to the CSSF. The fine was calculated per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a), considering circumstances under Article 8-5(1). Publication followed Article 8-6(1) after a proportionality assessment, confirming no market stability risks. No new requirements were introduced;
What You Need To Do
- Immediately review internal processes for annual Questionnaire submission, ensuring calendar invites and automated reminders for the 4 April deadline (covering prior year-end data)
- Conduct a gap analysis on AML/CFT cooperation obligations under Article 5(1), including response protocols to CSSF reminders or queries
- Update compliance calendars and train staff on escalation procedures; document all submissions with proof (e
- If late, proactively submit overdue items and request meetings if needed, as non-response forfeits mitigation opportunities
Key Dates
31 December 2024 - Reference year-end for the financial crime Questionnaire.
4 April 2025 - Statutory deadline for Questionnaire submission to CSSF. DEADLINE
11 September 2025 - Date CSSF imposed the €10,000 administrative fine after non-submission despite reminders.
9 January 2026 - Publication date of the sanction decision.
Compliance Impact
Urgency: Medium – This €10,000 fine for a straightforward reporting failure demonstrates CSSF's willingness to penalize non-cooperation swiftly, even without aggravating factors, but the amount is modest and targeted at administrative breaches. It matters as a warning shot in Luxembourg's AML landsc
Asset ManagerHedge Fund
Administrative sanction imposed on the alternative investment fund manager Sunbricks GP S.à r.l. (“AIFM”)
The CSSF imposed a **€10,000 administrative fine on Sunbricks GP S.à r.l.**, an alternative investment fund manager, for failing to submit a mandatory annual financial crime questionnaire by the April 4, 2025 deadline, despite two formal reminders. This enforcement action demonstrates the CSSF's strict approach to cooperation obligations under Luxembourg's anti-money laundering and counter-terrorist financing (AML/CFT) framework and signals that non-submission of required compliance documentation—even without evidence of underlying financial crime—triggers regulatory penalties.
What Changed
This is not a regulatory change but rather an enforcement action clarifying existing obligations:
Mandatory Annual Questionnaire Requirement: All professionals supervised, authorized, or registered by the CSSF must submit an annual questionnaire on financial crime by April 4 each year, covering the preceding calendar year.
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT establishes a non-negotiable duty to cooperate with the CSSF, which includes timely su
What You Need To Do
- regulated entities must
- *Establish Calendar Controls
- *Designate Responsible Parties
- *Prepare Documentation
- *Monitor Communications
Key Dates
April 4, 2025 – Annual financial crime questionnaire submission deadline (for year ending December 31, 2024) DEADLINE
Before September 11, 2025 – Two reminder notices issued by CSSF to Sunbricks GP
September 11, 2025 – Administrative fine decision date; questionnaire still not submitted
January 9, 2026 – Publication date of enforcement decision
2026 (for the year ending December 31, 2025).
Compliance Impact
Urgency: HIGH
Asset ManagerAll Firms
Administrative sanction imposed on the alternative investment fund manager Capitalis Premiere Group (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) Capitalis Premiere Group on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores the CSSF's strict enforcement of AML reporting duties, signaling heightened scrutiny on timely supervisory cooperation for Luxembourg-regulated entities. Compliance teams should note this as a low-value but public reminder of potential fines for administrative lapses in AML processes.
#
What Changed
This is not a regulatory change or new requirement but an enforcement precedent under existing rules: non-compliance with the annual financial crime questionnaire submission, mandated by Article 5(1) of the AML/CFT Law, triggers fines per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a). The CSSF considered all relevant circumstances under Article 8-5(1) to set the €10,000 fine amount and published the sanction nominatively after proportionality assessment per Article 8-6(1), confirming no market stabi
What You Need To Do
- Ensure timely submission of annual financial crime questionnaires by 4 April each year (for prior calendar year data); implement calendar reminders and escalation processes for CSSF requests
- Respond promptly to CSSF reminders or queries on AML/CFT compliance to avoid escalation to fines; document any delays with justification evidence
- No retroactive actions needed for this case, but conduct gap analysis on reporting workflows to prevent similar breaches
Key Dates
4 April 2025 - Deadline for submitting the annual financial crime questionnaire covering the year ending 31 December 2024. DEADLINE
11 September 2025 - Date CSSF imposed the €10,000 administrative fine on Capitalis Premiere Group for non-submission.
9 January 2026 - Date of CSSF publication of the sanction decision.
Compliance Impact
Urgency: Medium - This €10,000 fine is modest but publicly names the firm, amplifying reputational risk in Luxembourg's competitive fund domicile; it matters as a clear CSSF signal of zero tolerance for basic cooperation failures in AML, potentially foreshadowing stricter enforcement amid EU AML har
Asset ManagerHedge Fund
Administrative sanction imposed on the alternative investment fund manager Lion Management (“AIFM”)
The CSSF imposed a €10,000 administrative fine on Lion Management, an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the 4 April 2025 deadline. This enforcement action demonstrates the CSSF's commitment to enforcing cooperation obligations under Luxembourg's anti-money laundering and terrorist financing framework, with direct implications for all AIFMs regarding timely compliance with supervisory reporting requirements.
What Changed
This is not a regulatory change but rather an enforcement action clarifying existing obligations. However, it reinforces critical compliance requirements:
Mandatory Annual Questionnaire Submission: All CSSF-supervised professionals, including AIFMs, must submit an annual questionnaire on financial crime by the specified deadline (in this case, 4 April 2025 for the year ending 31 December 2024).
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on the fight against mon
What You Need To Do
- *Establish Calendar Controls
- *Designate Responsible Parties
- *Monitor CSSF Communications
- *Document Submission
- *Escalate Non-Compliance Immediately
Key Dates
4 April 2025 - Deadline for submission of annual financial crime questionnaire for year ending 31 December 2024 DEADLINE
11 September 2025 - Date CSSF imposed administrative fine after two reminders went unheeded
9 January 2026 - Publication date of the administrative sanction decision
Compliance Impact
Urgency: HIGH
Asset ManagerHedge Fund
Administrative sanction imposed on the alternative investment fund manager Max Gain Capital S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on Max Gain Capital S.à r.l., an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the April 2025 deadline. This enforcement action demonstrates the CSSF's active monitoring of AML/CFT compliance obligations and its willingness to sanction non-cooperation, even for procedural failures unrelated to substantive money laundering violations.
What Changed
This is not a regulatory change but rather an enforcement action clarifying existing obligations:
Mandatory Annual Questionnaire Requirement: All CSSF-supervised professionals must submit an annual questionnaire on financial crime covering the preceding calendar year.
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT imposes a non-negotiable duty to cooperate with CSSF supervisory requests.
Enforcement Escalation: The CSSF will issue reminders before imposin
What You Need To Do
- regulated entities must
- *Identify Reporting Obligations
- *Calendar Management
- *Documentation
- *Escalation Protocol
Key Dates
4 April 2025 - Deadline for submission of financial crime questionnaire for the year ending 31 December 2024 DEADLINE
Before 11 September 2025 - CSSF issued two reminders to Max Gain Capital after the missed deadline DEADLINE
11 September 2025 - CSSF imposed the €10,000 administrative fine
9 January 2026 - CSSF published the administrative sanction decision
Compliance Impact
Urgency: HIGH
Asset ManagerAll Firms
Administrative sanction imposed on the alternative investment fund manager Agriland Management S.A. (“AIFM”)
The Commission de Surveillance du Secteur Financier (CSSF), Luxembourg's financial regulator, imposed a **EUR 10,000 administrative fine on Agriland Management S.A.**, an alternative investment fund manager, on 11 September 2025 for failing to submit a mandatory annual financial crime questionnaire by the April 2025 deadline. This enforcement action demonstrates the CSSF's commitment to enforcing cooperation obligations under Luxembourg's anti-money laundering and terrorist financing (AML/CFT) framework and signals heightened scrutiny of compliance with supervisory reporting requirements.
What Changed
This is not a regulatory change but rather an enforcement action that clarifies existing obligations:
Mandatory Annual Reporting: All CSSF-supervised professionals must submit an annual questionnaire on financial crime by 4 April each year, covering the preceding calendar year.
Cooperation Obligation: Article 5(1) of the amended Law of 12 November 2004 on AML/CFT establishes a non-negotiable duty to cooperate with the CSSF, including timely submission of requested documentation.
Enforcement Esc
What You Need To Do
- *Establish Reporting Calendars
- *Designate Responsible Personnel
- *Respond to Regulatory Requests
- *Document Justifications
- *Monitor Supervisory Communications
Key Dates
4 April 2025 – Deadline for submission of financial crime questionnaire for year ending 31 December 2024 DEADLINE
Before 11 September 2025 – Two reminder notices issued by CSSF to Agriland Management S.A.
11 September 2025 – Administrative fine imposed
9 January 2026 – Sanction published by CSSF
Compliance Impact
Urgency: HIGH
Asset Manager
Administrative sanction imposed on the alternative investment fund manager Bedrock I GP S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) Bedrock I GP S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores CSSF's strict enforcement of AML reporting duties and serves as a public warning to supervised entities on timely supervisory compliance. It matters because it demonstrates that even modest fines are pursued for basic reporting lapses, potentially signaling heightened scrutiny on AIFMs' AML processes amid ongoing regulatory focus on financial crime risks.
#
What Changed
This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing (AML/CFT Law). Specifically, it reaffirms the mandatory annual submission of the CSSF's financial crime questionnaire ("Questionnaire") by supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, as part of the cooperation duty in Article 5(1). The fine was cal
What You Need To Do
- Immediately verify submission status of the 2024 Questionnaire (or any outstanding); if overdue, submit promptly with justification to mitigate further escalation
- Implement automated calendar alerts and internal workflows for all CSSF reporting deadlines, including annual AML/CFT Questionnaire
- Conduct a compliance gap analysis on cooperation obligations under Article 5(1) AML/CFT Law, documenting reminder responses and evidence retention
- Train senior managers and compliance teams on supervisory interactions, including rights to request in-person meetings before fines
- Review governance for timely escalation of CSSF reminders to decision-makers
Key Dates
31 December 2024 - Reference period end for the Questionnaire covering financial crime compliance. DEADLINE
4 April 2025 - Statutory deadline for Questionnaire submission to CSSF. DEADLINE
11 September 2025 - Date of administrative fine imposition (€10,000) after non-submission despite reminders.
9 January 2026 - Publication date of the sanction decision by CSSF.
Compliance Impact
Urgency: Medium - This is a post-facto enforcement on a past breach (2024 reporting cycle), with the €10,000 fine relatively low, indicating proportionality for a first-time or isolated lapse. It matters as a leading indicator of CSSF's 2025-2026 focus on AML cooperation, with multiple similar AIFM
Asset ManagerHedge Fund
Administrative sanction imposed on the alternative investment fund manager C5 Haven Cyber GP S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager (AIFM) C5 Haven Cyber GP S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite two reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores CSSF's strict enforcement of AML reporting duties and serves as a public warning to supervised entities on the consequences of non-cooperation. It matters because it demonstrates that even modest fines will be levied for procedural lapses, potentially signaling increased scrutiny on timely AML compliance submissions amid broader regulatory focus on financial crime risks.
#
What Changed
This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended AML/CFT Law:
Annual Questionnaire Submission: Supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, must submit an annual financial crime questionnaire ("Questionnaire") to CSSF as part of the cooperation duty in Article 5(1).
Fine Provisions: Fines are imposed per Articles 8-4(1), 8-4(2)(f), and 8-4(3)(a), with amounts determined by relevant
What You Need To Do
- Immediate Review
- Remediation if Late
- Process Enhancements
Key Dates
31 December 2024 - Reference year-end for the financial crime Questionnaire.
4 April 2025 - Statutory deadline for submitting the Questionnaire for the year ending 31 December 2024. DEADLINE
11 September 2025 - Date CSSF imposed the €10,000 administrative fine after noting non-submission despite reminders.
9 January 2026 - Date of CSSF publication of the sanction decision.
Compliance Impact
Urgency: Medium - This is a low-value fine (€10,000) for a procedural breach, not involving substantive AML failures like suspicious transactions or sanctions screening delays seen in higher fines (e.g., €185,000 on Rakuten Bank). It matters as a precedent for CSSF's willingness to publicly name-and
Asset ManagerHedge Fund
Administrative sanction imposed on the alternative investment fund manager C5 S.à r.l. (“AIFM”)
The CSSF imposed a €10,000 administrative fine on alternative investment fund manager C5 Haven Cyber GP S.à r.l. on 11 September 2025 for failing to submit its annual financial crime questionnaire by the 4 April 2025 deadline, despite reminders, breaching the cooperation obligation under Article 5(1) of Luxembourg's AML/CFT Law of 12 November 2004. This enforcement action underscores CSSF's strict enforcement of reporting duties in AML/CFT compliance, serving as a warning to supervised entities on the consequences of administrative delays. It matters because it highlights low-tolerance for even minor procedural lapses, potentially signaling increased scrutiny on annual reporting amid broader AML/CFT priorities.
#
What Changed
This is not a regulatory change or new requirement but an enforcement of existing obligations under the amended AML/CFT Law:
Article 5(1) mandates supervised professionals, including AIFMs under Article 3(2) of the Law of 12 July 2013 on AIFMs, to cooperate fully with CSSF, including submitting the annual financial crime questionnaire ("Questionnaire").
Breach occurred due to non-submission of the 2024 year-end Questionnaire, with fine determined per Articles 8-4(1), 8-4(2)(f), 8-4(3)(a), and 8-
What You Need To Do
- Review and confirm timely submission of all pending or future CSSF financial crime questionnaires; establish automated calendar reminders for annual deadlines (e
- Implement escalation protocols for CSSF reminders, ensuring immediate response and submission within days, not weeks
- Conduct internal audit of AML/CFT cooperation obligations, documenting justifications for any delays and preparing evidence for potential CSSF hearings or meetings
- Update compliance policies to prioritize Article 5(1) duties, including training for responsible persons on fine risks under Article 8-4
Key Dates
4 April 2025 - Deadline for submission of financial crime Questionnaire covering year ending 31 December 2024. DEADLINE
11 September 2025 - Date CSSF imposed €10,000 administrative fine on C5 Haven Cyber GP S.à r.l. for non-submission despite reminders.
9 January 2026 - Date of CSSF publication announcing the sanction.
Compliance Impact
Urgency: Medium - Matters due to CSSF's demonstrated willingness to impose and publicize fines for straightforward reporting failures, even at €10,000, which could escalate for repeat or severe cases; acts as a precedent amid rising AML/CFT enforcement (e.g., larger fines like €214,000 in similar co
Asset ManagerHedge Fund
Administrative sanction imposed on JTC (Luxembourg) S.A.
The CSSF imposed a €102,000 administrative fine on JTC (Luxembourg) S.A. on 23 July 2025 for breaches in its professional obligations as a depositary of non-financial assets under the AIFM Law, identified during an on-site inspection from February 2023 to January 2024 covering activities up to December 2022. This enforcement action highlights CSSF's scrutiny of depositary functions, particularly risk assessment and oversight controls, serving as a warning for similar entities to strengthen compliance amid rising supervisory focus on AIFM depositaries.
#
What Changed
This is an enforcement action, not a regulatory change; it enforces existing requirements under Article 51(1) (1st and 7th indents) and Article 51(2) (1st sub-paragraph, 3rd indent) of the amended Law of 12 July 2013 on AIFMs (AIFM Law), and related provisions like Article 92(1) of Commission Delegated Regulation (EU) No 231/2013 (CDR 231/2013). Key breaches include: failure to properly assess risks tied to AIFs' strategies and AIFMs' organization for oversight processes; lack of processes to ve
What You Need To Do
- related entities) must
- Conduct immediate gap analyses on risk assessment processes for AIF strategies and AIFM organization per Article 92(1) CDR 231/2013
- Implement robust verification processes for AIFM compliance with asset delegation rules
- Ensure availability of key documentation and evidence of controls for the depositary function, addressing pre-2022 gaps if applicable
- Develop and test oversight processes, leveraging self-identified improvements and action plans as mitigating factors, as JTC did prior to inspection
Key Dates
February 2023 - January 2024 Period of CSSF on-site inspection on depositary obligations, covering activities up to December 2022.
23 July 2025 Date CSSF imposed the €102,000 administrative fine on JTC (Luxembourg) S.A.
9 January 2026 Date of official CSSF publication announcing the sanction.
Compliance Impact
Urgency: High – This matters due to the fine's size (€102,000), reflecting breach accumulation, severity, and duration, despite JTC's partial remediation; it signals intensified CSSF on-site scrutiny of depositary functions post-2023 inspections, with potential for higher penalties absent proactive
Asset Manager
No description available.
Asset ManagerWealth ManagerBank Long Form Report – Practical rules concerning the self-assessment questionnaire to be submitted by investment firms – Mission and related reports of the réviseurs d’entreprises agréés (approved statutory auditors)
Broker DealerAll Firms
Update of Circular CSSF 24/853 on the Long Form Report (as amended by Circular CSSF 25/870) – Practical rules concerning the self-assessment questionnaire to be submitted by investment firms Mission and related reports of the réviseurs d’entreprises agréés (approved statutory auditors)
Circular CSSF 26/904 updates Circular CSSF 24/853 (as amended by Circular CSSF 25/870) by introducing a revised Long Form Report (LFR) for investment firms, featuring a digital self-assessment questionnaire (SAQ) and enhanced auditor reports focused on AML/CFT and risk management. This matters because it aligns reporting with CSSF's risk-based supervision under CSSF 4.0, reduces redundancies, applies proportionality based on business models, and mandates digital submission to improve efficiency and data analysis.
#
What Changed
Revised LFR Structure: Comprises four parts in a single digital document: (1) yearly SAQ completed by investment firms; (2) descriptive elements verified by approved statutory auditors (REAs); (3) AML/CFT report with risk assessments, declarations on audits, and data on incomplete fund transfers; (4) REA's independent assessment of ML/FT risks and organizational aspects.
Digital Format: Completion and submission via CSSF's online portal, supporting CSSF 4.0 digital strategy for efficient process
What You Need To Do
- Investment Firms
- REAs/Auditors
Key Dates
Financial year ending 31 December 2024 - Applicability of revised LFR to all investment firms; submissions begin for this period onward on a yearly basis.
No specific submission deadline stated - Yearly production required via CSSF portal; firms should align with existing annual reporting cycles for auditors (typically post-year-end). DEADLINE
Compliance Impact
Urgency: High - Applies immediately to FY ending 31 December 2024 reports, requiring swift updates to reporting processes, digital tools, and AML/CFT documentation amid CSSF's risk-based shift; non-compliance risks supervisory actions, as LFR directly informs CSSF oversight on key prudential/AML are
Asset ManagerBroker DealerAll Firms
Press release 26/01
Asset ManagerWealth Manager
Extract from the CSSF Newsletter No 300 – January 2026
BankAsset ManagerWealth Manager
Survey on the amount of covered deposits held on 31 December 2025
Circular CSSF-CPDI 25/49 is a **mandatory quarterly reporting requirement** for Luxembourg credit institutions and postal financial service providers to submit data on covered deposits as of December 31, 2025. This survey directly feeds into the Single Resolution Fund's annual target level calculation and the Luxembourg deposit guarantee scheme's contribution assessments, making it essential for regulatory compliance and fund management.
What Changed
The circular explicitly states that no substantive changes have been made to the survey process compared to previous quarters. The only modifications are administrative: the reference date (December 31, 2025) and the submission deadline (January 30, 2026). The specifications for data collection, definitions of covered and eligible deposits, and reporting methodologies remain unchanged from prior circulars, particularly Circular CSSF-CPDI 16/02 as amended by Circular CSSF-CPDI 23/35.
What You Need To Do
- *Calculate covered deposits as defined in Article 163 of the 2015 law, including balance and accrued interest (even if not yet due)
- *Report eligible deposits after applying exclusions under Article 172 of the 2015 law, including exclusions for financial institutions and life insurance products
- *Distinguish deposit types by reporting
- Total eligible deposits (field 201)
- Eligible deposits in omnibus accounts, fiduciary accounts, trusts, sub-accounts, and segregated accounts (field 0226)
Key Dates
January 30, 2026 - Deadline for transmitting average covered deposits data to the Single Resolution Board DEADLINE
December 31, 2025 - Reference date for the survey
December 24, 2025 - Circular publication date
Compliance Impact
Urgency: HIGH
BankPayment Provider
Update of Circular CSSF 24/850 on the practical rules concerning the descriptive report and the self-assessment questionnaire to be submitted on an annual basis by support PFS, as well as the engagement of the réviseurs d’entreprises agréés (approved statutory auditors) of support PFS and practical rules concerning the management letter and the separate report to be drawn up on an annual basis.
Circular CSSF 25/903 updates Circular CSSF 24/850, refining practical rules for support Professional of the Financial Sector (support PFS) in Luxembourg regarding their annual descriptive report, self-assessment questionnaire, and the roles of approved statutory auditors (réviseurs d’entreprises agréés). It specifies requirements for auditors' engagement, management letters, and separate annual reports. This matters for support PFS as it enhances supervisory oversight, ensures consistent reporting quality, and strengthens internal controls, directly impacting compliance and audit processes amid CSSF's focus on robust PFS supervision.
#
What Changed
Updates to Descriptive Report and Self-Assessment Questionnaire: Refines content, format, and submission requirements for support PFS's annual submissions, emphasizing more detailed disclosures on operations, risks, and controls (building on CSSF 24/850).
Auditor Engagement Rules: Introduces specific practical guidelines for approved statutory auditors, including mandatory scope of work, independence confirmations, and standardized procedures for reviewing support PFS reports.
Management Letter
What You Need To Do
- *Review and Update Processes
- *Engage/Confirm Auditors
- *Implement Templates and Testing
- *Training and Governance
- *Submit on Time
Key Dates
1 January 2026 - Effective Date Applies to annual reporting cycles starting for financial year 2025 onwards.
30 April (annually) - Submission Deadline Support PFS must submit descriptive report, self-assessment questionnaire, management letter, and separate auditor report to CSSF by 30 April following the financial year-end (first applicable: 30 April 2026 for FY 2025). DEADLINE
31 December 2025 - Preparation Milestone Auditors must be engaged and initial scoping completed by year-end 2025 for FY 2025 compliance. DEADLINE
Compliance Impact
Urgency: High. This is high urgency for support PFS due to the impending 30 April 2026 deadline for FY 2025 submissions, with non-compliance risking supervisory fines, license reviews, or reputational damage under CSSF's PFS enforcement regime. It matters as it tightens audit accountability, potenti
All FirmsFintechPayment Provider
Repeal of Circular CSSF 19/731 regarding the documents to be submitted on an annual basis by credit institutions.
Circular CSSF 25/902 repeals Circular CSSF 19/731 (as amended by Circular CSSF 19/710), which previously detailed annual document submission requirements for credit institutions, shifting to a dynamic list published on the CSSF website. This matters because it streamlines compliance by centralizing and updating requirements online, reducing reliance on static circulars while maintaining submission obligations. Credit institutions must transition to the new process to avoid disruptions in prudential reporting.
#
What Changed
Repeal of prior circulars: Circular CSSF 19/731 and its amendment via Circular CSSF 19/710 are fully repealed, eliminating the fixed list of annual submission documents.
Shift to website-based guidance: The updated list of required documents, affected entity categories, electronic submission channels, and deadlines is now published on the CSSF’s Prudential reporting for credit institutions webpage, including an interactive summary table for determining applicable submissions.
Ongoing obligations
What You Need To Do
- Review the CSSF Prudential reporting webpage (https://www
- Update internal reporting processes, templates, and workflows to reference the website instead of the repealed circular
- Confirm ongoing annual submissions via specified electronic channels; test interactive table for applicability to the institution's profile
- Archive references to Circular CSSF 19/731 in policies and train staff on the change
Key Dates
23 December 2025 - Publication and effective date of Circular CSSF 25/902, repealing Circular CSSF 19/731; transition to website-based list begins.
12 December 2019 - Original issuance of repealed Circular CSSF 19/731 (archived on 23 December 2025).
1 January 2025 ).
Compliance Impact
Urgency: Medium – The repeal does not alter core submission obligations but requires procedural updates to avoid non-compliance with potentially evolving lists under CRR3 alignments. It matters for operational efficiency, as failure to adapt could lead to missed deadlines or incorrect submissions, e
Bank
Practical rules concerning the descriptive report and the self-assessment questionnaire to be submitted on an annual basis by support PFS.Engagement of the réviseurs d’entreprises agréés (approved statutory auditors) of support PFS and practical rules concerning the management letter and the separate report to be drawn up on an annual basis.
Circular CSSF 24/850, as amended by Circular CSSF 25/903, establishes practical rules for support Professional of the Financial Sector (support PFS) in Luxembourg to submit annual descriptive reports and self-assessment questionnaires, while also defining the roles of approved statutory auditors (réviseurs d’entreprises agréés) in issuing management letters and separate reports. This guidance standardizes supervisory reporting and audit processes to enhance oversight of support PFS, which provide essential back-office services to authorized PFS. It matters because non-compliance risks supervisory sanctions, reputational damage, and operational disruptions for entities reliant on support PFS structures.
#
What Changed
Standardized Reporting Templates: Introduces detailed formats and content requirements for the annual descriptive report and self-assessment questionnaire, covering governance, risk management, internal controls, and operational metrics specific to support PFS activities (e.g., IT services, administrative support, custody).
Auditor Engagement Rules: Mandates approved statutory auditors to perform specific procedures, issue a management letter highlighting control weaknesses, and prepare a separa
What You Need To Do
- Annual Reporting Cycle
- February to review submissions, test controls, and issue management letter (flagging deficiencies) plus separate compliance report
- Governance Updates
- Auditor Coordination
- Record-Keeping
Key Dates
31 March annually - Deadline for submission of descriptive report, self-assessment questionnaire, management letter, and separate auditor report to CSSF (first applicable for FY 2024 reporting due 31 March 2025). DEADLINE
1 January 2025 - Effective date of original Circular CSSF 24/850.
15 December 2025 - Effective date of amendments in Circular CSSF 25/903, applicable to 2025 reporting cycle onwards.
End of February annually - Support PFS must engage auditors and provide necessary data to enable timely report preparation. DEADLINE
Compliance Impact
Urgency: High – This is a recurring annual obligation with a firm 31 March deadline, where delays trigger automatic CSSF notifications and potential fines (up to €250,000 per Law 1993). It matters for support PFS as it intensifies scrutiny on operational resilience in a post-SFI (2021) landscape, wh
BankWealth ManagerAll Firms
Press release 25/21(published on 22 December 2025, updated on 31 December 2025)
Asset ManagerWealth Manager
Press release 25/20
Bank
relating to specialised investment funds, investment companies in risk capital and undertakings for collective investment subject to Part II of the Law of 17 December 2010
Circular CSSF 25/901 consolidates and modernizes the supervisory framework for Luxembourg specialised investment funds (SIFs), investment companies in risk capital (SICARs), and undertakings for collective investment subject to Part II of the Law of 17 December 2010 (Part II UCIs), including their sub-funds. It streamlines investment rules, diversification limits, borrowing, disclosures, and risk management while enhancing flexibility for sophisticated investors and formalizing prior informal guidance, reducing regulatory complexity without compromising investor protection.
#
What Changed
Diversification and investment limits: Introduces tailored percentage-based thresholds; for funds marketed to unsophisticated retail investors, limits remain at 25% per issuer/UCI/asset, raised to 50% per issuer/UCI/asset or 70% per infrastructure investment for well-informed/professional investor funds, with CSSF derogations possible on justification. Limits apply on assets/commitments basis with look-through for intermediary vehicles.
SICAR-specific rules: Confirms risk capital investments (e.
What You Need To Do
- Review and update fund documents (e
- Assess and document compliance with new/relaxed diversification, borrowing, and SICAR investment rules; apply for CSSF derogations where justified
- Ensure risk-spreading in derivatives/collateral and deployment of SICAR cash into eligible assets; confirm look-through for intermediaries
- For retail-marketed funds
- Maintain robust governance/documentation to leverage flexibility; reference CSSF's Compilation for concepts
Key Dates
late 2025 /early 2026 publications, but no explicit dates are provided.
Compliance Impact
Urgency: High – Formalizes prior informal guidance into binding rules with enhanced flexibility but stricter retail protections and disclosure mandates, requiring immediate document reviews/updates for non-compliant SIFs/SICARs/Part II UCIs to avoid supervisory scrutiny or authorization issues; crit
Asset ManagerHedge Fund
Revision and remodelling of the rules to which Luxembourg undertakings governed by the Law of 30 March 1988 on undertakings for collective investment (“UCI”) are subject
Circular IML 91/75, as amended up to CSSF Circular 25/901, consolidates and modernizes the supervisory framework for Luxembourg Part II UCIs, SIFs, and SICARs, refining rules on diversification, borrowing, risk-spreading, and disclosures while tailoring requirements to investor profiles. It matters because it streamlines fragmented regulations, enhances fund competitiveness, and formalizes CSSF expectations without mandating immediate changes for pre-existing funds, reducing compliance burdens while promoting transparency and flexibility. This update aligns administrative practices with market realities, repealing outdated circulars to eliminate ambiguity.
#
What Changed
Consolidation and Repeals: Repeals CSSF Circulars 02/80, 07/309, 06/241, and Chapters G and I of IML 91/75; renders CSSF 08/356 and Chapter H of IML 91/75 inapplicable to Part II UCIs.
Flexible Diversification Rules: Introduces investor-category-based thresholds (e.g., stricter for retail, looser for sophisticated investors); allows CSSF derogations for SIFs/Part II UCIs with justification; applies look-through for intermediary vehicles; harmonizes ramp-up (up to 12 months for liquid strategies,
What You Need To Do
- Review and update offering documents/prospectuses for enhanced transparency on risks, limits, borrowing, liquidity tools (e
- Align fund documentation/terminology with CSSF Compilation of key concepts for consistency in filings and communications
- Disclose ramp-up/wind-down periods, potential derogations, and life extensions clearly; seek CSSF approval for exemptions where justified
- Assess portfolio compliance for new funds/compartments; leverage flexibility for sophisticated investors but maintain robust governance
- No immediate changes required for pre-19 Dec 2025 funds, but proactive alignment recommended to avoid future issues
Compliance Impact
Urgency: Medium – Not critical as existing funds are grandfathered with no retroactive changes required, but high relevance for new launches or material updates post-19 Dec 2025. It matters for operational efficiency (streamlined rules reduce fragmentation) and investor protection (tailored risks/di
Asset ManagerHedge FundAll Firms
Rules applicable to undertakings for collective investment when they employ certain techniques and instruments relating to transferable securities and money market instruments
Circular CSSF 08/356, as amended by Circular CSSF 25/901, establishes detailed rules for Luxembourg undertakings for collective investment (UCIs), including UCITS and alternative investment funds (AIFs), on the use of techniques and instruments relating to transferable securities and money market instruments, such as securities lending, repo transactions, and over-the-counter (OTC) derivatives. It matters because it ensures investor protection, risk management, and market stability by imposing strict eligibility, collateral, and operational requirements, aligning Luxembourg funds with EU standards under UCITS and AIFMD directives. Compliance is critical for Luxembourg-domiciled funds engaging in these activities to avoid regulatory sanctions and operational disruptions.
#
What Changed
The original Circular CSSF 08/356 (2008) transposed UCITS III requirements on eligible techniques like securities lending and repos. The amendment via Circular CSSF 25/901 (issued in 2025) introduces updates to reflect post-Brexit adjustments, enhanced ESG considerations in collateral eligibility, stricter counterparty risk limits for OTC derivatives, and improved transparency in reporting. Key changes include:
Expanded collateral rules: Collateral must now include sustainable assets meeting SFD
What You Need To Do
- *Policy Review & Update
- *Risk Management Systems
- *Counterparty Due Diligence
- *Operational Setup
- *Reporting & Disclosure
Key Dates
23 December 2008 - Original Circular CSSF 08/356 effective date for UCITS III implementation.
21 July 2011 - Partial updates for UCITS IV alignment.
22 July 2013 - Extension to AIFs under AIFMD transposition.
15 October 2025 - Issuance of amending Circular CSSF 25/901.
01 January 2026 - Effective date for amendments (e.g., new collateral rules, reporting formats).
Compliance Impact
Urgency: High - Immediate relevance for funds actively using these techniques (common in fixed-income and equity strategies for yield enhancement). Non-compliance risks CSSF fines (up to 5% of NAV), temporary prohibitions on techniques, or fund suspension. With the 01 January 2026 effective date rec
Asset ManagerHedge FundWealth Manager
amending Circular CSSF 22/811.Authorisation and organisation of entities acting as UCI administrators.
Circular CSSF 25/900, issued on 16 December 2025, amends Circular CSSF 22/811 to clarify governance principles, authorisation requirements, and operational standards for UCI (Undertakings for Collective Investment) administrators in Luxembourg, while reforming annual reporting obligations. It matters because it strengthens supervisory oversight, aligns with DORA for ICT outsourcing, and simplifies reporting to enhance efficiency and compliance in the fund administration sector.
#
What Changed
Repeals Annex B of Circular CSSF 22/811 with immediate effect, replacing it with streamlined annual reporting via a core compliance-focused Self-Assessment Questionnaire (SAQ) that assesses governance, internal controls, operational organization, and risk management; detailed instructions are now on the CSSF website.
Introduces prior CSSF authorisation requirements for entities acting as UCI administrators, including a defined administrative procedure with application details in Annex A; authori
What You Need To Do
- Assess eligibility and obtain prior CSSF authorisation via Annex A application (or notify substantial changes); ensure ongoing validity by monitoring operational model and delegations
- Adapt internal processes for revised annual UCIA reporting (SAQ-focused, integrated where applicable); submit using CSSF website instructions starting for FY ending 31 Dec 2025
- Review/update contracts with UCIs/IFMs to define roles, responsibilities, and oversight; implement delegation monitoring, remediation plans, and ICT compliance (DORA/Circular 25/882 or 20/750)
- For DORA-scope entities, align outsourcing arrangements with Circular CSSF 25/882
Key Dates
16 December 2025 - Issuance date; repeal of Annex B of Circular CSSF 22/811 effective immediately.
January 2025 - DORA entry into force, applying to ICT outsourcing for in-scope UCIAs.
31 December 2025 - New reporting framework (SAQ and updated modalities) applies to all financial years ending on or after this date.
Compliance Impact
Urgency: High - Immediate repeal of prior reporting Annex requires prompt process updates; new framework applies to FY 2025 year-ends (just past as of Jan 2026), risking supervisory scrutiny or penalties for non-compliance; DORA alignment adds operational resilience pressure amid ongoing CSSF focus
Asset ManagerWealth ManagerBank
Authorisation and organisation of entities acting as UCI administrators
Circular CSSF 22/811, as amended by Circular CSSF 25/900, establishes CSSF requirements for the authorisation, governance, internal organisation, and oversight of entities acting as UCI (Undertakings for Collective Investment) administrators in Luxembourg. It matters because it standardises practices amid regulatory, technological, and market evolutions, ensuring robust controls, risk management, and supervision for fund administration activities critical to Luxembourg's fund industry.
#
What Changed
Authorisation Requirements: Prior CSSF authorisation is mandatory for appointment as UCI administrator, via full application under sectoral laws or a simplified administrative procedure; application must include details per Annex A, with ongoing updates for substantial changes.
Scope of UCI Administration: Defines three core functions—registrar, NAV calculation/accounting, and client communication—requiring only one designated service provider per function per UCI (or compartment); UCI/IFM may p
What You Need To Do
- Submit authorisation application to CSSF with Annex A information before commencing UCI administration; notify substantial changes and keep file updated
- Establish/implement governance, controls, escalation processes, resource adequacy, ICT/business continuity per circular; ensure single provider per function
- For delegations
- Conclude written contracts with UCI/IFM; submit annual UCIA activity reports
Compliance Impact
Urgency: High – Non-compliance risks CSSF sanctions, as authorisation is prior and ongoing; critical for Luxembourg fund ecosystem given evolutions in tech/markets/DORA. Firms must act promptly if unauthorised or misaligned, especially with annual reporting since 2023 and DORA integration; impacts o
Asset ManagerBankAll Firms
Application of the Guidelines of the European Banking Authority on Acquisition, Development, and Construction (ADC) exposures to residential property under Article 126a of Regulation (EU) 575/2013 (EBA/GL/2025/03)
Circular CSSF 25/899 mandates the application of EBA Guidelines (EBA/GL/2025/03) on Acquisition, Development, and Construction (ADC) exposures to residential property under Article 126a of Regulation (EU) 575/2013 (CRR), specifying conditions for reducing the risk weight from 150% to 100% on qualifying exposures. This matters for Luxembourg credit institutions as it directly impacts capital requirements for real estate lending, promoting safer lending practices while aligning with Basel III standards via CRR3 implementation.
#
What Changed
Introduces precise definitions for CRR Article 126a(2) terms, enabling 100% risk weight (instead of 150%) for ADC exposures to residential property if conditions are met: at least 50% of total contracts as pre-sale/pre-lease agreements with substantial cash deposits (e.g., ≥10% of sale price for sales, ≥3x monthly lease for leases), or equivalent financing/sale-lease combos; plus obligor equity ≥25% of completed property value.
Mandates "sound standards for lending and credit monitoring" alongsi
What You Need To Do
- Review and classify ADC exposures against EBA-defined criteria (e
- Update internal policies, risk assessment models, and credit approval processes to incorporate "sound lending standards" and EBA specifications, including social housing carve-outs
- Recalculate capital requirements under standardized credit risk approach; report changes via CRR disclosures
- Maintain documentation proving compliance (e
- Institutions must "make every effort to comply" per EBA Regulation Article 16(3)
Key Dates
4 November 2025 - EBA Guidelines (EBA/GL/2025/03) apply across EU (two months post-publication on 27 June 2025 in all official languages).
1 December 2025 - CSSF Circular 25/899 published, requiring immediate compliance preparation for Luxembourg firms. DEADLINE
Compliance Impact
Urgency: High – Firms with significant ADC portfolios face immediate capital relief opportunities (50bp risk weight reduction) but risk non-compliance penalties if processes aren't updated by early 2026, especially post-CRR3 rollout; misclassification could inflate capital needs amid ongoing Basel i
Bank
Press release 25/19
Asset ManagerWealth Manager
Press release 25/18
BankFintechAll Firms
Fonds de garantie des dépôts Luxembourg (FGDL) – Method for calculating the ex-ante contributions pursuant to Article 182 of the Law of 18 December 2015 on the failure of credit institutions and of certain investment firms
Circular CSSF-CPDI 25/48, published on 13 November 2025, updates the methodology for calculating ex-ante contributions to the Fonds de garantie des dépôts Luxembourg (FGDL), Luxembourg's deposit guarantee scheme, by aligning risk adjustments with EBA Guidelines and introducing a zero floor for certain calculation components. This matters for Luxembourg credit institutions as it refines risk-sensitive contributions to meet DGSD target levels for two compartments (0.8% and an additional 0.8% of covered deposits), ensuring financial stability while promoting supervisory convergence across the EU.
#
What Changed
Risk Adjustment Updates (Annex 2): Increases weight of 'Return on assets' (ROA) risk indicator from 7.5% to 10%; decreases 'Deposit-size Risk' from 15% to 12.5%; adjusts sliding scale bounds for indicators like leverage ratio (3%-9%), capital coverage ratio (100%-200%), LCR/NSFR (100%-200%), NPL ratio (0%-3%), and others per Table 2, aligning with minimum EBA Guidelines weights totaling 75% plus national flexibility.
Formula Component Floor (Annex 1): Introduces a zero floor for Component 1 (max
What You Need To Do
- Review and update internal systems/models for contribution calculations to incorporate new risk weights, bounds (Table 2), zero floor for Component 1, and revised formulas in Annexes 1-2
- Validate data reporting for risk indicators (e
- Prepare for FGDL invoices reflecting compartment-specific rates; monitor covered deposits for surveys (e
- Conduct gap analysis against repealed circulars (20/21, 23/34); update policies for mergers, deposit changes, and gap fillings (Γ_λ)
Compliance Impact
Urgency: High – Institutions must promptly recalibrate risk models ahead of 2026 contributions to avoid miscalculations, penalties, or underfunding risks, as this directly impacts prudential contributions amid ongoing DGSD buildup to 2026; non-alignment with EBA could trigger CSSF scrutiny. Failure
Bank
Fonds de garantie des dépôts Luxembourg (FGDL) – Method for calculating the ex-ante contributions pursuant to Article 182 of the Law of 18 December 2015 on the failure of credit institutions and of certain investment firms
Circular CSSF-CPDI 25/48 updates the methodology for calculating ex-ante annual contributions to the Fonds de garantie des dépôts Luxembourg (FGDL), Luxembourg's deposit guarantee scheme, specifically for the target levels in Articles 179 and 180 of the Law of 18 December 2015 on the failure of credit institutions and certain investment firms. This matters because it introduces a risk-adjusted contribution model aligned with EBA Guidelines, shifting from purely deposit-based calculations to ones incorporating institution-specific risk factors, potentially increasing contributions for higher-risk banks while promoting stability in the scheme's funding.
#
What Changed
Modified Contribution Formula: Replaces prior methods (e.g., from Circulars CSSF-CPDI 16/01, 17/06, 20/21) with a new structure: Component 1 proportional to covered deposits growth (Γ_{j,k}) at 0.8% base rate, plus a flat add-on (T_j D_{j-2,k}) for target shortfalls, adjusted by a uniform factor μ per compartment, and multiplied by a new risk adjustment factor (ARW_{j,k}).
Risk Adjustment Introduction: ARW is calculated using a weighted score (minimum 75% on EBA core categories, plus 12.5% depos
What You Need To Do
- Data Reporting
- Internal Calculations
- Risk Monitoring
- Systems Update
Key Dates
13 November 2025 - Circular publication date by CSSF.
31 December 2025 - Reference date for covered deposits survey (per related Circular CSSF-CPDI 25/49).
2026 - First application year for new methodology (contributions for year j=2026 based on j-1=2025 data; invoices issued by FGDL).
for 2026 cycle.
Compliance Impact
Urgency: High - Affects 2026 contributions directly, requiring immediate data readiness and modeling by Q1 2026; non-compliance risks penalties, inaccurate payments, or higher costs from poor risk scores. Matters for capital planning as riskier profiles face uplifts, emphasizing proactive risk manag
Bank
Update of Circular CSSF 22/821 on the Long Form Report, as amended by Circulars CSSF 23/845 and CSSF 24/865
Circular CSSF 25/897 updates Circular CSSF 22/821 on the Long Form Report (LFR) for credit institutions, further aligning the self-assessment questionnaire (SAQ) with current supervisory priorities such as ML/FT risks and organizational aspects. This matters because it refines reporting to reduce redundancies, enhance transparency in REA assessments, and reflect evolving prudential focuses since prior amendments via Circulars CSSF 23/845 and 24/865, ensuring institutions' reports better support CSSF oversight.
#
What Changed
Introduces new modules in the revised SAQ to align with supervisory points of focus, building on prior expansions (e.g., credit/counterparty risk, liquidity risk, climate-related risks from CSSF 23/845).
Emphasizes REA's independent assessment in the AML/CFT report, requiring exhaustive, transparent evaluations of ML/FT risks across institutions, branches, majority-owned subsidiaries abroad, and tied agents; prohibits vague language (e.g., no "no serious weaknesses" phrasing) and mandates positi
What You Need To Do
- Complete and submit revised SAQ annually, incorporating new modules on supervisory focuses like ML/FT risks and providing detailed data to REA
- Authorized management
- Ensure AML/CFT report details methodologies (e
- Review prior LFR submissions against this update to align with suppressed redundancies and new emphases
Key Dates
31 October 2025 - Issuance date of Circular CSSF 25/897.
Three months after financial year-end - Annual submission deadline for SAQ to CSSF (unchanged from prior circulars). DEADLINE
Five months after financial year-end - Submission deadline for REA Reports (Financial Instruments and Funds Report; AML/CFT Report). DEADLINE
Six months after financial year-end - Aligned submission for REA management letter (per amendments in CSSF 23/845 to Circular 22/826).
Compliance Impact
Urgency: High - Institutions face immediate refinement needs for 2025 year-end reporting (e.g., SAQ due ~Q1 2026), with stricter REA scrutiny on AML/CFT transparency risking supervisory findings or enforcement if vague assessments persist; aligns with ongoing CSSF push for risk-focused oversight ami
Bank
Long Form ReportPractical rules concerning the self-assessment questionnaire to be submitted by institutionsMission and related reports of the statutory auditors (réviseurs d’entreprises agréés)
**Circular CSSF 22/821** (as amended) fundamentally restructures how Luxembourg credit institutions report to the Commission de Surveillance du Secteur Financier (CSSF) by replacing the traditional Long Form Report with a digital **self-assessment questionnaire (SAQ)**, complemented by auditor-prepared reports. This shift represents a significant operational change that requires institutions to directly participate in prudential self-assessment while maintaining robust external audit oversight, making it essential for compliance and operational teams to understand new submission requirements and digital workflows.
What Changed
The circular introduces a three-component reporting framework that fundamentally alters the compliance landscape:
Self-Assessment Questionnaire (SAQ): A digital, annually-completed questionnaire that institutions must prepare directly, covering domains within CSSF and ECB prudential supervision competence
Agreed Upon Procedures (AUP) Reports: Reports prepared by approved statutory auditors (réviseurs d'entreprises agréés) on specific compliance areas
Separate REA Report on Financial Instruments
What You Need To Do
- *For Credit Institutions
- *Establish SAQ Governance
- *Data Preparation
- *Digital System Access
- *Module Completion
Key Dates
25 October 2022 - Circular CSSF 22/821 issued
31 December 2022 - Circular enters into application
Three months before financial year closure - SAQ becomes accessible through CSSF digital solution
Three months after financial year closure - Deadline for SAQ submission to CSSF DEADLINE
Five months after financial year closure - Deadline for REA reports submission DEADLINE
Compliance Impact
Urgency: HIGH
Bank
Provisions relating to credit institutions and investment firms of EU origin established in Luxembourg by way of branches or exercising activities in Luxembourg by way of free provision of services
Circular CSSF 07/325, as amended by Circulars CSSF 21/765, CSSF 22/827, and most recently CSSF 25/898, establishes supervisory requirements for EU credit institutions and investment firms operating in Luxembourg via branches or free provision of services (FOPS). It matters for compliance professionals as it defines CSSF's host authority role, notification obligations, reporting, and enforcement powers, ensuring alignment with CRD and MiFID II while adapting to evolving EU rules.
#
What Changed
CSSF 21/765: Updated provisions following amendments to CSSF Regulation No 12-02, refining notification and operational requirements for branches and FOPS.
CSSF 22/827: Further amendments to align with CRD and MiFID II changes, including enhanced notifications for programme alterations (e.g., one-month prior written notice for changes in operations, services, or activities).
CSSF 25/898: Latest update (noted in CSSF Newsletter No 298, November 2025), incorporating recent legal/regulatory develop
What You Need To Do
- Notifications
- Supervision cooperation
Key Dates
One month before change effective date - Notify CSSF and home authority in writing of programme changes (e.g., operations, services, additional places of business) per CRD Article 36(3) and MiFID II Article 35(10).
Within 3 months of receipt - Home state authority communicates notification file to CSSF for branch/FOPS establishment.
Six months after financial year-end - Submit electronically signed SAQ (via eDesk), annual AML/CFT and conduct of business report (per Circular CSSF 19/731, to be repealed by CSSF 25/902), reviewed by REA.
Compliance Impact
Urgency: Medium - Matters due to recurring annual reporting (e.g., SAQ, AML/CFT within six months post-year-end) and prior notifications for changes, with CSSF enforcement powers (e.g., measures under LFS Article 46(2)) for non-compliance. Recent CSSF 25/898 update (Nov 2025) requires immediate revi
BankBroker Dealer
Update of Circular CSSF 07/325 on Provisions relating to credit institutions and investment firms of EU origin established in Luxembourg by way of branches or exercising activities in Luxembourg by way of free provision of services, as amended by Circulars CSSF 21/765 and CSSF 22/827
Circular CSSF 25/898 updates Luxembourg's supervisory framework for EU-origin credit institutions and investment firms operating in Luxembourg through branches or free provision of services. This amendment enhances the self-assessment questionnaire (SAQ) used by the CSSF to align supervisory oversight with current regulatory priorities, particularly adding UCI administration as a new thematic module. The update reflects the CSSF's evolving supervisory focus and requires affected institutions to demonstrate compliance with expanded assessment criteria.
What Changed
The circular introduces the following material modifications to Circular CSSF 07/325:
*New Supervisory Module
UCI administration** has been added as a thematic module to the self-assessment questionnaire, reflecting increased regulatory attention to fund administration practices.
*Enhanced Self-Assessment Framework**
Existing modules have been updated to better align with supervisory objectives and current regulatory priorities.
The revised SAQ now captures a broader range of supervisory point
What You Need To Do
- *Update Self-Assessment Processes
- Revise internal SAQ completion procedures to address the new UCI administration module
- Ensure all thematic modules reflect current supervisory expectations
- *Assess UCI Administration Compliance
- If the institution provides or is involved in UCI administration services, conduct a detailed assessment of compliance with CSSF expectations
Key Dates
31 October 2025 - Circular CSSF 25/898 published by the CSSF
19 December 2025 - Related modernization framework (Circular CSSF 25/901) entered into force for Part II UCIs, SIFs, and SICARs
No specific implementation deadline stated - Institutions should align their SAQ responses and compliance documentation with the updated framework immediately upon publication DEADLINE
Compliance Impact
Urgency: HIGH
BankBroker DealerAsset Manager
Press release 25/17
Asset ManagerWealth Manager
Survey on the amount of covered deposits held on 30 September 2025
Circular CSSF-CPDI 25/47 mandates a regular survey by Luxembourg credit institutions on the amount of covered deposits as of **30 September 2025**, focusing on eligible and covered deposits under the Law of 18 December 2015 on deposit guarantee schemes. It matters because it ensures accurate reporting to the Conseil de protection des déposants et des investisseurs (CPDI) for FGDL (Fonds de garantie des dépôts Luxembourg) compliance, with detailed field-by-field instructions for complex accounts like omnibus and trusts.
#
What Changed
This circular updates prior guidance (notably CSSF-CPDI 16/02 as amended by CSSF-CPDI 23/35) by specifying the survey reference date of 30 September 2025 and providing granular reporting fields for eligible deposits (e.g., exclusions for financial institution-like structures and life insurance products), covered deposits capped at €100,000 per person, and breakdowns by natural/legal persons, including shares in omnibus accounts, fiduciaries, trusts, sub-accounts, and segregated accounts. Key fie
What You Need To Do
- For omnibus/trust accounts, obtain and report shares of identifiable entitled persons, apportion by legal status of holder, and ensure fields like 0226 and 0255 reconcile
- Designated management reviews/approves data; transmit accurately to CSSF/CPDI, respecting prior circulars (e
- Exclude non-creditor accounts or those assimilated to financial institutions/life insurance
Key Dates
30 September 2025 - Reference date for snapshot of deposits, eligible deposits, and covered deposits.
6 October 2025 - Publication date of the circular by CSSF.
31 December 2025 ) imply prompt post-reference date filing to CSSF/CPDI; firms should confirm via full PDF.
Compliance Impact
Urgency: Medium – Past reference date (30 September 2025) as of January 2026 means non-reporting firms risk immediate FGDL non-compliance, fines, or supervisory action from CSSF, but this is a routine quarterly survey (see related Circular CSSF-CPDI 25/49 for December 2025). Matters for prudential r
Bank
Press release 25/16
Asset ManagerWealth Manager
Press release 25/15
Bank
Single Resolution Fund – Information request by the Single Resolution Board for the calculation of the 2026 contribution according to Articles 4 and 14 of Commission Delegated Regulation (EU) 2015/63
Circular CSSF-CODERES 25/21, issued by the CSSF on 29 September 2025, mandates Luxembourg credit institutions to submit specific data via XBRL-formatted Data Reporting Forms (DRFs) to enable the Single Resolution Board (SRB) to calculate 2026 ex-ante contributions to the Single Resolution Fund (SRF) under Articles 4 and 14 of Commission Delegated Regulation (EU) 2015/63. This matters because non-compliance risks SRB using estimates, applying the highest risk multiplier, or penalties, ensuring the financial sector funds resolution costs without taxpayer burden.
#
What Changed
Introduces data collection for 2026 SRF contributions, conditional on SRB verifying SRF funds fall below 1% of covered deposits in the Banking Union by early 2026.
Mandates XBRL submission of DRFs (except restatements up to 2022 in Excel); provides templates in Annexes 3a, 4, 5 (User Guide), and 7a/7b for additional assurances.
Additional assurance requirements (e.g., auditor reports or Agreed-Upon Procedures - AUP) apply conditionally to ECB-supervised institutions unless under lump-sum payment
What You Need To Do
- Download and complete DRF using Annexes (e
- For ECB-supervised institutions
- Align internal systems with CSSF templates early; validate data to avoid SRB assumptions under Article 17(1) DR
- Review Annex 1 (SRB kick-off letter), Annex 4 (2026 Guidance), and Annex 6 (ECB list)
Key Dates
30 November 2025 - SRB decision deadline on whether to calculate/collect 2026 SRF contributions based on DRFs (triggers full additional assurance application). DEADLINE
15 January 2026 - ECB-supervised institutions submit AUP or auditor reports on restatements to CSSF resolution department.
16 January 2026, 24:00 CET - All institutions submit completed DRF in XBRL to CSSF; late/incomplete submissions lead to SRB estimates or highest risk multiplier.
Compliance Impact
Urgency: High - The 16 January 2026 deadline is imminent (today is 25 January 2026), risking immediate SRB penalties like estimates or maximum risk multipliers if submissions are missed/inaccurate; affects capital planning as contributions directly impact prudential positions.
Bank
Press release 25/14
Asset ManagerWealth Manager
Adoption of the EBA Guidelines on internal policies, procedures and controls to ensure the implementation of Union and national restrictive measures (sanctions)
Circular CSSF 25/896 adopts the EBA Guidelines EBA/GL/2024/14 and EBA/GL/2024/15, mandating Luxembourg financial institutions to establish robust internal policies, procedures, and controls for complying with EU and national restrictive measures (sanctions). This matters because it sets binding EU-wide standards to prevent sanctions violations and circumvention, with absolute obligations for immediate asset freezing and reporting, amid escalating geopolitical tensions.
#
What Changed
Institutions must develop, implement, and maintain up-to-date policies, procedures, and controls for identifying, investigating, and applying restrictive measures without delay, including risk management for violations and circumvention.
Management body responsibilities expanded: approve sanctions compliance strategy, oversee implementation, conduct at least annual assessments of exposure and controls, ensure remedial actions, and report deficiencies.
Screening and monitoring requirements: Maint
What You Need To Do
- Conduct annual exposure assessments to sanctions risks and circumvention; update policies accordingly
- Appoint senior management/board-level responsibility for approving and overseeing sanctions strategy, including annual reviews and deficiency reporting
- Implement reliable screening systems for customers, transactions, and lists; define screenable datasets; test systems regularly for effectiveness (e
- Provide documented training to relevant staff on sanctions, institutional exposure, and internal processes
- Establish processes for immediate action on matches: suspend transfers, freeze assets, report to Ministry of Finance/CSSF/FIU without delay; maintain whitelists only under strict conditions
Compliance Impact
Urgency: High – With less than 12 months until the 30 December 2025 deadline (as of January 2026), firms face binding requirements for absolute compliance, including personal accountability for management bodies; non-compliance risks enforcement by CSSF, reputational damage, and fines amid frequent
BankPayment ProviderCrypto Exchange
Press release 25/13
Bank
Press release 25/12
Asset ManagerWealth Manager
Press release 25/11
Asset ManagerWealth Manager
Press release 25/10
Bank
Press release 25/09
Asset ManagerWealth Manager
Press release 25/08
BankAsset ManagerWealth Manager Press release 25/07
Asset ManagerWealth Manager
Press release 25/06
Asset ManagerWealth Manager
Press release 25/05
BankAsset ManagerWealth Manager
Press release 25/04
BankFintechAll Firms
Press release 25/03
BankWealth Manager
No description available.
BankWealth Manager
No description available.
BankWealth ManagerAsset Manager