GRC Report Staff

ASIC's Form COI4 requires unlicensed carried over instrument (COI) lenders to lodge an annual compliance certificate by 15 August each year. The certificate covers business activity data, oversight personnel, risk status, general conduct obligations, and dispute resolution outcomes. Compliance teams should note that the form is dated 31 October 2018 (guide dated 21 November 2014), even though the update is listed as 2026-09-16, so they should confirm whether the content has changed.

ASIC Form 2205 is the prescribed form for notifying ASIC of company resolutions affecting shares, including share rights alterations, consolidations and subdivisions, capital reductions, and financial assistance approvals. Lodgement deadlines are short (14 days for most categories, one month for consolidations and subdivisions), so compliance teams need clear internal processes to avoid late lodgement and the associated public register and penalty exposure.

On September 16, 2026, BaFin issued a public warning that the unknown operators of xlla(.)tech are offering banking, financial, and cryptocurrency services in Germany without authorization. They pose as a fictitious Swiss company called "XLLA." Compliance teams should treat this as a fraud and sanctions-screening indicator and update their monitoring and customer-protection controls accordingly.

EIOPA's Eurofi article argues that insurance should become an active tool for climate prevention, risk reduction, and adaptation within the forthcoming European Integrated Framework for Climate Resilience. It is a policy-positioning piece rather than binding regulation, but it signals where supervisory expectations, data requests, and consumer-protection monitoring on natural catastrophe risk are heading. Compliance teams should treat it as an early indicator of future scrutiny.

ASIC has extended its Consultation Agreement with the Financial Markets Standards Board (FMSB) by three years, to 25 September 2029. The extension deepens ASIC's engagement in shaping global wholesale market standards, but ASIC states that its participation is not an endorsement and that industry standards do not replace obligations under Australian law. Compliance teams should treat FMSB materials as informative good practice, not as a safe harbor.

The FCA's annual report for the year ended March 31, 2026 (the first year of its 2025 to 2030 strategy) describes a shift from risk elimination to risk rebalancing, with earlier intervention and clearer expectations. Compliance teams should note the Buy Now Pay Later (BNPL) regime effective July 2026, the motor finance redress scheme, the Payment Systems Regulator (PSR) consolidation, and the FCA's expanded AML supervision of professional services firms.

EIOPA's Eurofi article explains that the revised Solvency II framework, applicable from January 30, 2027, is expected to release significant capital through a revised risk margin calculation. That release comes with an explicit political expectation that the capital will support productive European investment. Compliance teams should prepare for new capital treatments, closer supervisory monitoring of capital use, and EIOPA's first report by the end of 2028.