Wealth & Private Banking in Luxembourg

What Changed

CSSF adopts AMLA-developed data collection templates for credit institutions, investment firms, and investment fund managers (excluding specialised professionals), replacing its prior questionnaire to avoid duplication with AMLA's broad exercise and ensure a level playing field ahead of the new EU AML/CFT methodology. Entities selected for AMLA's mandatory calibration exercise (notified directly by CSSF) must report quantitative and qualitative ML/TF risk data; non-selected entities still report via AMLA templates on 2025 risks. Launch delayed from 2 March 2026 due to AMLA's consultation...

What You Need To Do

• Monitor CSSF communications for final questionnaire, launch dates, and eDesk access; prepare data on 2025 ML/TF risks and mitigation using current AMLA draft (not for submission)
• Selected AMLA calibration participants
• Non-selected credit/financial institutions
• Specialised professionals

Key Dates

References

• [1] cssf.lu/wp-content/uploads/circular_letter_120226_AML_CFT...
• [2] cssf.lu/en/Document/circular-letter-2026-02-12/
• [3] cssf.lu/wp-content/uploads/circular_letter_110326_AML_CFT...
• [4] elvingerhoss.lu/insights/publications/amlcft-questionnair...
• [5] cssf.lu/wp-content/uploads/PSF-SP_2026_AML_conference.pdf
• [6] cssf.lu/en/Document/circular-letter-2026-03-11/
• [7] cssf.lu/wp-content/uploads/newsletter301.pdf
• [8] cssf.lu/en/anti-money-laundering-and-countering-the-finan...

What Changed

The document was originally published on 14 January 2019 and updated on 12 March 2026, reflecting revisions to the predefined list of professional activities and mandates[Source URL]. Key aspects include: Alignment with Circular CSSF 18/698 requirements for IFMs (management companies for UCIs and AIFs), specifying reportable roles like those in collective portfolio management, risk management, valuation, compliance, internal audit, and IT operations. Emphasis on detailed documentation of mandates to demonstrate fitness, properness, and avoidance of conflicts, including for shareholders with...

What You Need To Do

• Download and use the XLSX table
• Update authorization and notification files
• Conduct fit-and-proper assessments
• Annual compliance review
• Policy updates

Key Dates

References

• [1] cssf.lu/wp-content/uploads/cssf18_698eng.pdf
• [2] osmia.consulting/newsroom/cssf-circular-18698
• [3] dasseti.com/insights/cssf-circular-18-698-delegate-oversight
• [4] acolin.com/news/10-important-facts-investment-fund-manage...
• [5] ume.solutions/wp-content/uploads/2024/12/ume-CSSF-18698.pdf
• [6] cssf.lu/en/Document/circular-cssf-18-698/
• [7] pwc.lu/en/pwcacademy/training-library/focus-on-cssf-circu...
• [8] deloitte.com/lu/en/Industries/investment-management/resea...

What Changed

Postponement of CSSF-specific questionnaire: The CSSF has decided not to proceed with its own AML/CFT standardised data collection for most supervised entities (credit institutions, investment firms, investment fund managers), opting instead to rely on AMLA's questionnaire to avoid duplication and ensure a level playing field. Exception for specialised professionals: Specialised professionals of the financial sector (e.g., certain non-credit institutions) remain subject to a CSSF-specific questionnaire, though timelines are affected by the delay announcement. Rationale tied to AMLA...

What You Need To Do

• Monitor CSSF updates
• Prioritize AMLA obligations
• Specialised professionals
• Internal review
• No immediate submissions

Key Dates

References

• [1] cssf.lu/en/Document/circular-letter-2026-03-11/
• [2] cssf.lu/en/
• [3] cssf.lu/wp-content/uploads/circular_letter_120226_AML_CFT...
• [4] cssf.lu/wp-content/uploads/PSF-SP_2026_AML_conference.pdf
• [5] cssf.lu/en/Document/circular-letter-2026-02-12/
• [6] elvingerhoss.lu/insights/publications/amlcft-questionnair...
• [7] jdsupra.com/legalnews/luxembourg-s-cssf-circular-26-906-o...
• [8] cssf.lu/en/anti-money-laundering-and-countering-the-finan...

What Changed

No new regulatory changes or requirements are introduced; this is an enforcement action applying existing rules. Based on patterns in the provided CSSF sanction documents, the sanction likely addresses breaches such as: Failure to cooperate with CSSF requests, e.g., not submitting required AML/CFT questionnaires by deadlines, violating Article 5(1) of the amended Law of 12 November 2004 on AML/CFT. Non-compliance with investment policies, organizational requirements, or conduct rules under the UCI Law (e.g., Articles 41, 43, 109), including improper broker exposures or valuation...

What You Need To Do

• Enhance cooperation protocols
• Review investment compliance
• Strengthen governance
• Training and monitoring
• Self-reporting

Key Dates

References

• [1] cssf.lu/wp-content/uploads/S_95_GFIA_Max-Gain-Capital-S.a...
• [2] cssf.lu/wp-content/uploads/S_90_GFI_Zeus_Asset_Management...
• [3] cssf.lu/wp-content/uploads/S_46_B_X_100125_en.pdf
• [4] cssf.lu/en/Document/administrative-sanction-of-15-october...
• [5] cssf.lu/en/international-financial-sanctions/
• [6] cssf.lu/wp-content/uploads/FAQ_International_financial_sa...
• [7] cssf.lu/wp-content/uploads/2025-AML-CFT-conference-dedica...

What Changed

Authorisation Requirements: UCIs require CSSF approval of constitutive documents (articles, management regulations), depositary selection, and management company/AIFM applications for contractual forms. Corporate UCIs need similar approvals for appointed managers. Crypto-Asset Updates (aligned with separate but related FAQ Version 7): Replaces "virtual assets" with "crypto-assets" per MiCAR (EU 2023/1114); UCITS and retail AIFs (non-well-informed investors) capped at 10% NAV indirect exposure; AIFs for well-informed/professional investors have no cap but require governance, risk management,...

What You Need To Do

• Review and Update Documents
• Crypto-Specific
• Authorisation/Amendments
• Governance and Reporting
• Ongoing Compliance

Key Dates

References

• [1] cssf.lu/en/authorisation-of-a-uci/
• [2] linari-law.lu/cssf-updates-its-faq-on-crypto-assets-for-u...
• [3] dechert.com/knowledge/onpoint/2026/1/cssf-is-streamlining...
• [4] cssf.lu/en/2026/02/the-cssf-has-updated-its-faq-crypto-as...
• [5] cssf.lu/wp-content/uploads/FAQ_Crypto_assets_UCI.pdf
• [6] cssf.lu/en/regulatory-framework-for-ucis/
• [7] cssf.lu/en/Document/faq-crypto-assets-undertakings-for-co...
• [8] simmons-simmons.com/en/publications/cmlksxdud00dqu43ge0sl...

What Changed

This is not a regulatory change or new requirement but an enforcement action highlighting existing obligations under Luxembourg law. Key breaches likely mirror patterns in recent CSSF sanctions, such as non-compliance with UCI Law provisions on investment policies (e.g., Articles 41, 43), sound accounting procedures (Article 109), and rules of conduct (Articles 111, CSSF Regulation 10-04), including improper cash deposits with unauthorized brokers and inaccurate asset valuation.

What You Need To Do

• Immediate review of counterparty due diligence
• Enhance valuation and accounting controls
• Conduct internal audits
• Update governance and reporting

Key Dates

References

• [1] cssf.lu/wp-content/uploads/S_90_GFI_Zeus_Asset_Management...
• [2] cssf.lu/wp-content/uploads/S_49_B_X_280725_en.pdf
• [3] cssf.lu/en/publication-data/
• [4] regulatoryandcompliance.com/2024/12/luxembourg-cssf-intro...
• [5] cssf.lu/en/Document/administrative-sanction-of-28-july-2025/
• [6] cssf.lu/en/2024/07/warning-concerning-the-website-www-gen...
• [7] state.gov/wp-content/uploads/2025/09/638719_2025-Luxembou...
• [8] cliffordchance.com/content/dam/cliffordchance/PDFDocument...

What Changed

Mandatory Electronic-Only Submission: Documents listed in Annex I must be transmitted exclusively via e-file (http://www.e-file.lu) or SOFiE (http://www.cetrel-securities.lu/wp_static/what-do-we-offer/secured-reporting-channel-sofie-sort/), in PDF format supporting read access, printing, copy/paste, and word search; other methods post-February 1, 2019, are null and void. Dynamic Annex Updates: The annex, published on the CSSF website, is regularly updated (e.g., latest noted April 1, 2025) and includes prospectuses, management regulations, annual reports, risk management reports, compliance...

What You Need To Do

• Register/access e-file or SOFiE platforms if not already (test/production environments available since February 2019)
• Consult and adhere to the latest Annex I for document list, nomenclatures, and formats (PDF with full functionality)
• Ensure submissions are final/official versions matching hard copies; use specified identifiers for UCIs/SIFs/SICARs
• Implement processes for automatic/manual transmission (e
• Train staff on responsibilities and integrate into reporting workflows; reference CSSF FAQs for closing documents

Key Dates

References

• [1] bsp.lu/lu/publications/newsletters-legal-alerts/circular-...
• [2] cssf.lu/wp-content/uploads/cssf19_708_eng_upd300622.pdf
• [3] mondaq.com/securitization-amp-structured-finance/780098/c...
• [4] cssf.lu/en/Document/circular-cssf-19-708/
• [5] e-file.lu/wiki/images/2/20/20190211_InfoFlash_19_708.pdf
• [6] cssf.lu/en/Document/circular-cssf-19-708-appendix/
• [7] cssf.lu/en/reporting-to-be-submitted-by-ucis/
• [8] dechert.com/knowledge/onpoint/2022/9/cssf-announces-fast-...

What Changed

Updates to Descriptive Report and Self-Assessment Questionnaire: Refines content, format, and submission requirements for support PFS's annual submissions, emphasizing more detailed disclosures on operations, risks, and controls (building on CSSF 24/850). Auditor Engagement Rules: Introduces specific practical guidelines for approved statutory auditors, including mandatory scope of work, independence confirmations, and standardized procedures for reviewing support PFS reports. Management Letter and Separate Report: Establishes detailed rules for auditors to issue an annual management letter...

What You Need To Do

• *Review and Update Processes
• *Engage/Confirm Auditors
• *Implement Templates and Testing
• *Training and Governance
• *Submit on Time

Key Dates

What Changed

Standardized Reporting Templates: Introduces detailed formats and content requirements for the annual descriptive report and self-assessment questionnaire, covering governance, risk management, internal controls, and operational metrics specific to support PFS activities (e.g., IT services, administrative support, custody). Auditor Engagement Rules: Mandates approved statutory auditors to perform specific procedures, issue a management letter highlighting control weaknesses, and prepare a separate report confirming compliance with the circular's requirements. Amendments via CSSF 25/903:...

What You Need To Do

• Annual Reporting Cycle
• February to review submissions, test controls, and issue management letter (flagging deficiencies) plus separate compliance report
• Governance Updates
• Auditor Coordination
• Record-Keeping

Key Dates

What Changed

Consolidation and Repeals: Repeals CSSF Circulars 02/80, 07/309, 06/241, and Chapters G and I of IML 91/75; renders CSSF 08/356 and Chapter H of IML 91/75 inapplicable to Part II UCIs. Flexible Diversification Rules: Introduces investor-category-based thresholds (e.g., stricter for retail, looser for sophisticated investors); allows CSSF derogations for SIFs/Part II UCIs with justification; applies look-through for intermediary vehicles; harmonizes ramp-up (up to 12 months for liquid strategies, 4 years for private equity) and wind-down periods. Borrowing Limits: New limits for SIFs/Part II...

What You Need To Do

• Review and update offering documents/prospectuses for enhanced transparency on risks, limits, borrowing, liquidity tools (e
• Align fund documentation/terminology with CSSF Compilation of key concepts for consistency in filings and communications
• Disclose ramp-up/wind-down periods, potential derogations, and life extensions clearly; seek CSSF approval for exemptions where justified
• Assess portfolio compliance for new funds/compartments; leverage flexibility for sophisticated investors but maintain robust governance
• No immediate changes required for pre-19 Dec 2025 funds, but proactive alignment recommended to avoid future issues

References

• [1] pwc.lu/en/newsletter/2026/cssf-circular-25-901.html
• [2] bakermckenzie.com/en/insight/publications/2026/01/luxembo...
• [3] ashurst.com/en/insights/the-cssf-updates-the-rules-for-si...
• [4] ogier.com/news-and-insights/insights/cssf-circular-25901-...
• [5] aoshearman.com/en/insights/cssf-circular-25-901-a-simplif...
• [6] arendt.com/news-insights/news/new-cssf-circular-and-conce...
• [7] debevoise.com/insights/publications/2025/12/cssf-circular...
• [8] cssf.lu/en/Document/circular-iml-91-75/

What Changed

The original Circular CSSF 08/356 (2008) transposed UCITS III requirements on eligible techniques like securities lending and repos. The amendment via Circular CSSF 25/901 (issued in 2025) introduces updates to reflect post-Brexit adjustments, enhanced ESG considerations in collateral eligibility, stricter counterparty risk limits for OTC derivatives, and improved transparency in reporting.

What You Need To Do

• *Policy Review & Update
• *Risk Management Systems
• *Counterparty Due Diligence
• *Operational Setup
• *Reporting & Disclosure

Key Dates

What Changed

Repeals Annex B of Circular CSSF 22/811 with immediate effect, replacing it with streamlined annual reporting via a core compliance-focused Self-Assessment Questionnaire (SAQ) that assesses governance, internal controls, operational organization, and risk management; detailed instructions are now on the CSSF website. Introduces prior CSSF authorisation requirements for entities acting as UCI administrators, including a defined administrative procedure with application details in Annex A; authorisation remains valid unless substantial changes occur, requiring re-application or prior...

What You Need To Do

• Assess eligibility and obtain prior CSSF authorisation via Annex A application (or notify substantial changes); ensure ongoing validity by monitoring operational model and delegations
• Adapt internal processes for revised annual UCIA reporting (SAQ-focused, integrated where applicable); submit using CSSF website instructions starting for FY ending 31 Dec 2025
• Review/update contracts with UCIs/IFMs to define roles, responsibilities, and oversight; implement delegation monitoring, remediation plans, and ICT compliance (DORA/Circular 25/882 or 20/750)
• For DORA-scope entities, align outsourcing arrangements with Circular CSSF 25/882

Key Dates

References

• [1] cssf.lu/wp-content/uploads/cssf25_900eng.pdf
• [2] blog.uit.lu/circular-cssf-25-90
• [3] ogier.com/news-and-insights/insights/luxembourg-cssf-circ...
• [4] cssf.lu/en/Document/circular-cssf-25-900/
• [5] cssf.lu/en/2025/12/reform-of-circular-cssf-22-811-changes...
• [6] cssf.lu/en/uci-administration/
• [7] harneys.com/our-blogs/regulatory/cssf-circular-25-900-upd...

What Changed

Authorisation Requirements: Prior CSSF authorisation is mandatory for appointment as UCI administrator, via full application under sectoral laws or a simplified administrative procedure; application must include details per Annex A, with ongoing updates for substantial changes. Scope of UCI Administration: Defines three core functions—registrar, NAV calculation/accounting, and client communication—requiring only one designated service provider per function per UCI (or compartment); UCI/IFM may perform functions internally or delegate with oversight. Governance and Controls: Mandates sound...

What You Need To Do

• Submit authorisation application to CSSF with Annex A information before commencing UCI administration; notify substantial changes and keep file updated
• Establish/implement governance, controls, escalation processes, resource adequacy, ICT/business continuity per circular; ensure single provider per function
• For delegations
• Conclude written contracts with UCI/IFM; submit annual UCIA activity reports

References

• [1] cssf.lu/wp-content/uploads/cssf22_811eng.pdf
• [2] lexnow.lu/blog/articles-4/cssf-circular-22-811-uci-admini...
• [3] cssf.lu/en/uci-administration/
• [4] stibbe.com/publications-and-insights/new-cssf-circular-on...
• [5] cssf.lu/wp-content/uploads/FAQ_UCIA_Circular.pdf
• [6] cssf.lu/en/Document/circular-cssf-22-811/
• [7] ey.com/en_lu/insights/wealth-asset-management/circular-cs...
• [8] simmons-simmons.com/en/publications/cl3lg5am617hn0a74c5aa...