Consumer Protection / Conduct in Luxembourg

What Changed

• - Adoption of ESMA Guidelines: CSSF mandates application of ESMA's criteria for evaluating staff knowledge and competence in crypto-asset services, including roles in custody, trading, portfolio...
• Assessment Framework: Firms must implement standardized tests and processes to verify staff qualifications, aligning with MiCA Article 62 on CASP authorization, focusing on technical crypto...
• No New Standalone Rules: This circular builds on prior CSSF MiCA circulars (e.g., 25/890 on crypto-asset classification), integrating competence checks into licensing dossiers and ongoing supervision.

Suggested Considerations

• Assess Staff Competence: Implement ESMA-guided evaluations (e.g., exams, certifications) for all relevant personnel handling crypto services; document results in governance frameworks.
• Update Policies and Training: Integrate competence criteria into HR, onboarding, and annual reviews; roll out MiCA-specific training on reporting, breaches, and governance.
• Licensing Dossier Enhancement: Include competence attestations in CSSF applications; appoint dedicated compliance/risk officers with verified qualifications.
• Ongoing Monitoring: Conduct regular audits, penetration tests, and incident planning; confirm compliance annually via management body statements.
• Early CSSF Engagement: Schedule dialogues and info sessions; create MiCA readiness scorecards for board and regulator discussions.

Key Dates

References

• [1] copla.com/blog/compliance-regulations/mica-regulation-in-...
• [2] cssf.lu/wp-content/uploads/cssf25_890eng.pdf
• [3] cssf.lu/en/markets-in-crypto-assets-mica-micar/
• [4] loyensloeff.com/insights/news--events/news/circular-cssf-...
• [5] cssf.lu/en/Document/circular-cssf-25-890/
• [6] cliffordchance.com/content/dam/cliffordchance/PDFDocument...
• [7] cssf.lu/en/2023/07/regulation-on-markets-in-crypto-assets...
• [8] dechert.com/knowledge/onpoint/2023/1/initiatives-to-regul...

What Changed

• The most recent update (March 9, 2026) to the Technical FAQ reflects the regulatory framework established by CSSF Regulation No 20-08 (as modified by Regulation No 24-10).
• First-time buyers: LTV limit of up to 100%
• Other buyers: LTV limit of 90%, implemented via portfolio allowance Buy-to-Let Residential Loans:
• Standard LTV limit of 80%
• Temporary exemption (until June 30, 2025): Lenders may apply LTV ratios up to 95% for up to 10% of annual production Other Residential Real Estate Loans:

Suggested Considerations

• *For all lenders:
• *Verify LTV compliance calculations for all new residential mortgage originations using the framework specified in the FAQ, ensuring own funds are calculated as actual equity contributions from borrowers
• *Implement dual LTV tracking for borrowers financing new property through sale of existing property, ensuring compliance with both interim and final LTV ratios
• *Document own funds sources carefully, particularly when cash collateral or sale proceeds are used, as these are only permitted for loans with initial LTV below 100%
• *Prepare for June 30, 2025 transition by:

Key Dates

References

• [1] cssf.lu/wp-content/uploads/Technical_FAQ_on_Regulation_CS...
• [2] cssf.lu/en/Document/cssf-regulation-no-20-08-of-3-decembe...
• [3] bsp.lu/lu/publications/newsletters-newsflashes/consumer-c...
• [4] cssf.lu/en/Document/technical-faq-on-cssf-regulation-no-2...
• [5] esrb.europa.eu/pub/pdf/other/esrb.notification20201218_LT...
• [6] cssf.lu/wp-content/uploads/cssf25_899eng.pdf
• [7] simmons-simmons.com/en/publications/ckiyunxuz1ba50a686os8...
• [8] pwc.lu/en/press/press-articles-2024/fighting-real-estate-...

What Changed

• No new regulatory changes or requirements are introduced; this is an enforcement action applying existing rules.
• Failure to cooperate with CSSF requests, e.g., not submitting required AML/CFT questionnaires by deadlines, violating Article 5(1) of the amended Law of 12 November 2004 on AML/CFT.
• Non-compliance with investment policies, organizational requirements, or conduct rules under the UCI Law (e.g., Articles 41, 43, 109), including improper broker exposures or valuation failures.
• These reflect ongoing enforcement of established frameworks like the AIFM Law, UCI Law, and AML/CFT Law, with fines calibrated by factors like breach duration, firm size, cooperation level, and prior...

Suggested Considerations

• Enhance cooperation protocols: Implement automated tracking for CSSF requests (e.g., questionnaires) with escalations for reminders; document all responses.
• Review investment compliance: Audit broker exposures, valuation processes, and subscription/redemption controls against UCI Law Articles 41-43, 109; suspend dealings if uncertainties arise.
• Strengthen governance: Conduct gap analyses on internal controls, risk assessments, and reporting for depositary/oversight functions per AIFM Law Article 19(9) and CDR 231/2013.
• Training and monitoring: Roll out firm-wide training on AML/CFT obligations (Article 5(1)) and perform reconciliations of assets/records; prepare for on-site/off-site CSSF inspections.
• Self-reporting: Proactively disclose prior breaches to mitigate fine severity.

Key Dates

References

• [1] cssf.lu/wp-content/uploads/S_95_GFIA_Max-Gain-Capital-S.a...
• [2] cssf.lu/wp-content/uploads/S_90_GFI_Zeus_Asset_Management...
• [3] cssf.lu/wp-content/uploads/S_46_B_X_100125_en.pdf
• [4] cssf.lu/en/Document/administrative-sanction-of-15-october...
• [5] cssf.lu/en/international-financial-sanctions/
• [6] cssf.lu/wp-content/uploads/FAQ_International_financial_sa...
• [7] cssf.lu/wp-content/uploads/2025-AML-CFT-conference-dedica...

What Changed

• The original Circular CSSF 08/356 (2008) transposed UCITS III requirements on eligible techniques like securities lending and repos.
• Expanded collateral rules: Collateral must now include sustainable assets meeting SFDR criteria, with daily marking-to-market and haircuts adjusted for liquidity and credit risk (Section 3).
• Counterparty exposure limits: Net exposure to a single OTC counterparty capped at 10% of net asset value (NAV), down from previous thresholds in some cases, with mandatory collateralization (Section...
• Operational safeguards: Mandatory use of triparty agents for repos, enhanced segregation of collateral, and annual stress testing disclosures (Section 5, as amended).
• Reporting enhancements: Quarterly reports to CSSF on transaction volumes, risks, and revenues from these activities (Annex 1, updated). These align with ESMA guidelines (e.g., ESMA/2012/832 on OTC...

Suggested Considerations

• *Policy Review & Update: Revise fund prospectuses, KIIDs, and risk management policies to reflect amended limits (e.g., counterparty caps, ESG collateral) within 3 months of 01 January 2026.
• *Risk Management Systems: Implement or upgrade systems for daily collateral valuation, stress testing, and exposure monitoring; conduct gap analysis against Section 4 requirements.
• *Counterparty Due Diligence: Reassess OTC counterparties for eligibility (e.g., EMIR clearing thresholds); negotiate ISDA/CSA agreements with updated haircuts.
• *Operational Setup: Appoint triparty agents where required; ensure collateral segregation complies with Section 5.
• *Reporting & Disclosure: Prepare for new quarterly CSSF filings (template in Annex 1); disclose revenues/reinvestments from techniques in annual reports (Article 14 UCITS Law).

Key Dates