Live Updates

Circular CSSF 07/325 (as amended by Circulars CSSF 21/765, CSSF 22/827 and CSSF 25/898) (Updated)

AI Analysis

Executive Summary

Circular CSSF 07/325, as amended by Circulars CSSF 21/765, CSSF 22/827, and most recently CSSF 25/898, establishes supervisory requirements for EU credit institutions and investment firms operating in Luxembourg via branches or free provision of services (FOPS). It matters for compliance professionals as it defines CSSF's host authority role, notification obligations, reporting, and enforcement powers, ensuring alignment with CRD and MiFID II while adapting to evolving EU rules. #

What Changed

- CSSF 21/765: Updated provisions following amendments to CSSF Regulation No 12-02, refining notification and operational requirements for branches and FOPS. - CSSF 22/827: Further amendments to align with CRD and MiFID II changes, including enhanced notifications for programme alterations (e.g., one-month prior written notice for changes in operations, services, or activities). - CSSF 25/898: Latest update (noted in CSSF Newsletter No 298, November 2025), incorporating recent legal/regulatory developments, such as refined reporting via eDesk portal, AML/CFT compliance assessments, and supervision instruments like the Self-Assessment Questionnaire (SAQ). Overall, amendments emphasize digital reporting (e.g., SAQ via eDesk), REA appraisals on AML/CFT and conduct rules, and CSSF's expanded o

What You Need To Do

  • Notifications
  • Supervision cooperation

Key Dates

One month before change effective date - Notify CSSF and home authority in writing of programme changes (e.g., operations, services, additional places of business) per CRD Article 36(3) and MiFID II Article 35(10).
Within 3 months of receipt - Home state authority communicates notification file to CSSF for branch/FOPS establishment.
Six months after financial year-end - Submit electronically signed SAQ (via eDesk), annual AML/CFT and conduct of business report (per Circular CSSF 19/731, to be repealed by CSSF 25/902), reviewed by REA.

Compliance Impact

Urgency: Medium - Matters due to recurring annual reporting (e.g., SAQ, AML/CFT within six months post-year-end) and prior notifications for changes, with CSSF enforcement powers (e.g., measures under LFS Article 46(2)) for non-compliance. Recent CSSF 25/898 update (Nov 2025) requires immediate review of processes for digital submissions, but no retroactive changes or hard deadlines post-2025; gra

Who is Affected

EU credit institutions and investment firms with head offices in other Member States, establishing branches or providing services in Luxembourg.Branches must comply with local infrastructure, legal framework, and supervision; FOPS entities face notification and change-reporting duties.Responsible executives (REA) and authorised management of affected entities, particularly for signing/submitting reports.

Summary

Provisions relating to credit institutions and investment firms of EU origin established in Luxembourg by way of branches or exercising activities in Luxembourg by way of free provision of services

Relevant Firm Types

BankBroker Dealer
View Original on CSSF Back to Feed